https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T21:56:03.576941+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-443 certfr-2014-avi-443 — De multiples vulnérabilités ont été corrigées dans <span class="textit">TYPO3</span>. Elles permettent à un attaquant d… 2026-10-23T21:56:03.712885+00:00 certfr-2014-avi-443 https://cve.radiocsirt.org/vuln/euvd-2026-107677 EUVD-2026-107677 2026-10-23T21:56:03.712926+00:00 EUVD-2026-107677 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4701 fkie_cve-2013-4701 2026-10-23T21:56:03.712942+00:00

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/ghsa-5qp6-78pr-gv8c GHSA-5qp6-78pr-gv8c — PHP OpenID Library Denial of Service vulnerability 2026-10-23T21:56:03.712971+00:00

Affected: Packagist: openid/php-openid, Packagist: typo3/cms

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/gsd-2013-4701 gsd-2013-4701 2026-10-23T21:56:03.712996+00:00 gsd-2013-4701 https://cve.radiocsirt.org/vuln/jvndb-2013-000080 jvndb-2013-000080 2026-10-23T21:56:03.713008+00:00

The PHP OpenID Library contains an XML external entity injection vulnerability. Takeshi Terada from Mitsui Bussan Secure Directions, Inc. and Kosuke Ebihara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4701 Withdrawn: UBUNTU-CVE-2013-4701 2026-10-23T21:56:03.713026+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: php-openid, Ubuntu:16.04:LTS: php-openid

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.