https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:52:22.390538+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09951 bdu:2024-09951 2026-10-03T01:52:22.498500+00:00 bdu:2024-09951 https://cve.radiocsirt.org/vuln/bell-cve-2024-11236 BELL-CVE-2024-11236 2026-10-03T01:52:22.498536+00:00

Affected: Alpaquita:23: php81, Alpaquita:stream: php83

 https://cve.radiocsirt.org/vuln/bit-libphp-2024-11236 BIT-libphp-2024-11236 — Integer overflow in the firebird and dblib quoters causing OOB writes 2026-10-03T01:52:22.498573+00:00

Affected: Bitnami: libphp

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1007 certfr-2024-avi-1007 — De multiples vulnérabilités ont été découvertes dans les produits PHP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T01:52:22.498598+00:00 certfr-2024-avi-1007 https://cve.radiocsirt.org/vuln/euvd-2026-258508 EUVD-2026-258508 2026-10-03T01:52:22.498615+00:00 EUVD-2026-258508 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11236 fkie_cve-2024-11236 2026-10-03T01:52:22.498625+00:00

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-11236 msrc_CVE-2024-11236 — Integer overflow in the firebird and dblib quoters causing OOB writes 2026-10-03T01:52:22.498647+00:00 msrc_CVE-2024-11236 https://cve.radiocsirt.org/vuln/oesa-2024-2478 OESA-2024-2478 — php security update 2026-10-03T01:52:22.498663+00:00

Affected: openEuler:20.03-LTS-SP4: php, openEuler:22.03-LTS-SP1: php, openEuler:24.03-LTS: php, openEuler:22.03-LTS-SP4: php, openEuler:22.03-LTS-SP3: php

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es): (CVE-2024-11233) (CVE-2024-11234) (CVE-2024-11236) (CVE-2024-8929) (CVE-2024-8932)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14521-1 openSUSE-SU-2024:14521-1 — php8-8.3.14-1.1 on GA media 2026-10-03T01:52:22.498695+00:00

php8-8.3.14-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:4136-1 SUSE-SU-2024:4136-1 — Security update for php8 2026-10-03T01:52:22.498714+00:00

Security update for php8

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11236 UBUNTU-CVE-2024-11236 2026-10-03T01:52:22.498731+00:00

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3519 WID-SEC-W-2024-3519 — PHP: Mehrere Schwachstellen 2026-10-03T01:52:22.498757+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PHP ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen und einen Spoofing-Angriff durchzuführen.