https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:03:08.050271+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11903 cnvd-2016-11903 2026-10-05T15:03:08.056727+00:00 cnvd-2016-11903 https://cve.radiocsirt.org/vuln/euvd-2026-88102 EUVD-2026-88102 2026-10-05T15:03:08.056763+00:00 EUVD-2026-88102 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9847 fkie_cve-2016-9847 2026-10-05T15:03:08.056777+00:00

An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an attacker to determine the user's blowfish_secret and potentially decrypt their cookies. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

 https://cve.radiocsirt.org/vuln/ghsa-9xhq-pm7v-693p GHSA-9xhq-pm7v-693p — phpMyAdmin Cryptographic Vulnerability 2026-10-05T15:03:08.056808+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an attacker to determine the user's blowfish_secret and potentially decrypt their cookies. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

 https://cve.radiocsirt.org/vuln/gsd-2016-9847 gsd-2016-9847 2026-10-05T15:03:08.056835+00:00 gsd-2016-9847 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T15:03:08.056848+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9847 UBUNTU-CVE-2016-9847 2026-10-05T15:03:08.056892+00:00

Affected: Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin

An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an attacker to determine the user's blowfish_secret and potentially decrypt their cookies. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.