https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:47:30.658868+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6542 ALSA-2022:6542 — Moderate: php:7.4 security update 2026-10-05T01:47:30.941586+00:00

Affected: AlmaLinux:8: apcu-panel, AlmaLinux:8: libzip, AlmaLinux:8: libzip-devel, AlmaLinux:8: libzip-tools, AlmaLinux:8: php, AlmaLinux:8: php-bcmath, AlmaLinux:8: php-cli, AlmaLinux:8: php-common, AlmaLinux:8: php-dba, AlmaLinux:8: php-dbg and 27 more

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948) * Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949) * Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-05279 bdu:2021-05279 2026-10-05T01:47:30.941786+00:00 bdu:2021-05279 https://cve.radiocsirt.org/vuln/bit-drupal-2020-36193 BIT-drupal-2020-36193 2026-10-05T01:47:30.941810+00:00

Affected: Bitnami: drupal

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-050 certfr-2021-avi-050 — Une vulnérabilité a été découverte dans Drupal Core. Elle permet à un attaquant de provoquer un problème de sécurité no… 2026-10-05T01:47:30.941833+00:00 certfr-2021-avi-050 https://cve.radiocsirt.org/vuln/cleanstart-2024-di03393 CLEANSTART-2024-DI03393 — Tar 2026-10-05T01:47:30.941849+00:00

Affected: CleanStart: drupal7

Security vulnerability affects the drupal7 package. Tar.

 https://cve.radiocsirt.org/vuln/euvd-2026-256035 EUVD-2026-256035 2026-10-05T01:47:30.941868+00:00 EUVD-2026-256035 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36193 fkie_cve-2020-36193 2026-10-05T01:47:30.941879+00:00

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

 https://cve.radiocsirt.org/vuln/fsa-202302 FSA-202302 — Festo: Several vulnerabilities in FactoryViews 2026-10-05T01:47:30.941899+00:00

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

 https://cve.radiocsirt.org/vuln/ghsa-rpw6-9xfx-jvcx GHSA-rpw6-9xfx-jvcx — Directory Traversal in Archive_Tar 2026-10-05T01:47:30.942014+00:00

Affected: Packagist: pear/archive_tar

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

### :exclamation: Note: There was an [initial fix](https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b389de916) for this vulnerability made in version `1.4.12`. That fix introduced a bug which was [fixed in 1.4.13](https://github.com/pear/Archive_Tar/pull/36). Therefore we have set the first-patched-version to `1.4.13` which the earliest working version that avoids this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2020-36193 gsd-2020-36193 2026-10-05T01:47:30.942037+00:00 gsd-2020-36193 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1267-1 openSUSE-SU-2021:1267-1 — Security update for php7-pear 2026-10-05T01:47:30.942049+00:00

Security update for php7-pear

 https://cve.radiocsirt.org/vuln/rhsa-2022:6541 RHSA-2022:6541 — Red Hat Security Advisory: php:7.4 security update 2026-10-05T01:47:30.942065+00:00

Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked Archive_Tar: improper filename sanitization leads to file overwrites Archive_Tar: directory traversal due to inadequate checking of symbolic links

 https://cve.radiocsirt.org/vuln/suse-su-2021:2926-1 SUSE-SU-2021:2926-1 — Security update for php72 2026-10-05T01:47:30.942084+00:00

Security update for php72

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36193 UBUNTU-CVE-2020-36193 2026-10-05T01:47:30.942099+00:00

Affected: Ubuntu:16.04:LTS: php-pear, Ubuntu:18.04:LTS: php-pear, Ubuntu:20.04:LTS: php-pear

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.