https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:57:33.716902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:5468 ALSA-2022:5468 — ALSA-2022:5468: php:8.0 security update (Important) 2026-10-02T11:57:34.358219+00:00

Affected: AlmaLinux:8: apcu-panel, AlmaLinux:8: libzip, AlmaLinux:8: libzip-devel, AlmaLinux:8: libzip-tools, AlmaLinux:8: php-pear, AlmaLinux:8: php-pecl-apcu, AlmaLinux:8: php-pecl-apcu-devel, AlmaLinux:8: php-pecl-rrd, AlmaLinux:8: php-pecl-xdebug3, AlmaLinux:8: php-pecl-zip

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-03725 bdu:2022-03725 2026-10-02T11:57:34.358367+00:00 bdu:2022-03725 https://cve.radiocsirt.org/vuln/bell-cve-2022-31626 Withdrawn: BELL-CVE-2022-31626 — CVE-2022-31626 does not affect BellSoft software 2026-10-02T11:57:34.358385+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-libphp-2022-31626 BIT-libphp-2022-31626 — mysqlnd/pdo password buffer overflow 2026-10-02T11:57:34.358401+00:00

Affected: Bitnami: libphp

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-534 certfr-2022-avi-534 — De multiples vulnérabilités ont été découvertes dans PHP . Elles permettent à un attaquant de provoquer une exécution d… 2026-10-02T11:57:34.358423+00:00 certfr-2022-avi-534 https://cve.radiocsirt.org/vuln/euvd-2026-184302 EUVD-2026-184302 2026-10-02T11:57:34.358438+00:00 EUVD-2026-184302 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31626 fkie_cve-2022-31626 2026-10-02T11:57:34.358449+00:00

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

 https://cve.radiocsirt.org/vuln/fsa-202302 FSA-202302 — Festo: Several vulnerabilities in FactoryViews 2026-10-02T11:57:34.358470+00:00

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

 https://cve.radiocsirt.org/vuln/ghsa-jfc6-9gw3-fhfg GHSA-jfc6-9gw3-fhfg 2026-10-02T11:57:34.358579+00:00

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-31626 gsd-2022-31626 2026-10-02T11:57:34.358595+00:00 gsd-2022-31626 https://cve.radiocsirt.org/vuln/icsa-26-027-02 ICSA-26-027-02 — Festo Didactic SE MES PC 2026-10-02T11:57:34.358606+00:00

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

 https://cve.radiocsirt.org/vuln/msrc_cve-2022-31626 msrc_CVE-2022-31626 — mysqlnd/pdo password buffer overflow 2026-10-02T11:57:34.358697+00:00 msrc_CVE-2022-31626 https://cve.radiocsirt.org/vuln/oesa-2022-1721 OESA-2022-1721 — php security update 2026-10-02T11:57:34.358711+00:00

Affected: openEuler:20.03-LTS-SP1: php, openEuler:20.03-LTS-SP3: php, openEuler:22.03-LTS: php

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server. Security Fix(es): In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.(CVE-2022-31626) In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.(CVE-2022-31625)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13267-1 openSUSE-SU-2024:13267-1 — php8-8.2.10-3.1 on GA media 2026-10-02T11:57:34.358742+00:00

php8-8.2.10-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:5471 RHSA-2022:5471 — Red Hat Security Advisory: php:7.4 security update 2026-10-02T11:57:34.358760+00:00

php: password of excessive length triggers buffer overflow leading to RCE

 https://cve.radiocsirt.org/vuln/suse-su-2022:2161-1 SUSE-SU-2022:2161-1 — Security update for php74 2026-10-02T11:57:34.358776+00:00

Security update for php74

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31626 UBUNTU-CVE-2022-31626 2026-10-02T11:57:34.358791+00:00

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0255 WID-SEC-W-2022-0255 — PHP: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-02T11:57:34.358817+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.