https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:05:22.206637+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3735 ALSA-2019:3735 — Critical: php:7.2 security update 2026-10-02T11:05:22.601223+00:00

Affected: AlmaLinux:8: apcu-panel, AlmaLinux:8: libzip, AlmaLinux:8: libzip-devel, AlmaLinux:8: libzip-tools, AlmaLinux:8: php-pear, AlmaLinux:8: php-pecl-apcu, AlmaLinux:8: php-pecl-apcu-devel, AlmaLinux:8: php-pecl-zip

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-00013 bdu:2020-00013 2026-10-02T11:05:22.601336+00:00 bdu:2020-00013 https://cve.radiocsirt.org/vuln/bell-cve-2019-11043 Withdrawn: BELL-CVE-2019-11043 — CVE-2019-11043 does not affect BellSoft software 2026-10-02T11:05:22.601355+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2019-ale-014 certfr-2019-ale-014 — Le CERT-FR a publié un avis concernant la CVE-2019-11043 qui affecte PHP et permet l'exécution de code arbitraire à dis… 2026-10-02T11:05:22.601371+00:00 certfr-2019-ale-014 https://cve.radiocsirt.org/vuln/certfr-2019-avi-534 certfr-2019-avi-534 — De multiples vulnérabilités ont été découvertes dans PHP. Elles permettent à un attaquant de provoquer un problème de s… 2026-10-02T11:05:22.601389+00:00 certfr-2019-avi-534 https://cve.radiocsirt.org/vuln/cnvd-2019-36855 cnvd-2019-36855 2026-10-02T11:05:22.601403+00:00 cnvd-2019-36855 https://cve.radiocsirt.org/vuln/euvd-2026-256175 EUVD-2026-256175 2026-10-02T11:05:22.601414+00:00 EUVD-2026-256175 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11043 fkie_cve-2019-11043 2026-10-02T11:05:22.601424+00:00

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

 https://cve.radiocsirt.org/vuln/fsa-202302 FSA-202302 — Festo: Several vulnerabilities in FactoryViews 2026-10-02T11:05:22.601445+00:00

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

 https://cve.radiocsirt.org/vuln/ghsa-6qjm-m8fp-j2mm GHSA-6qjm-m8fp-j2mm 2026-10-02T11:05:22.601564+00:00

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2019-11043 gsd-2019-11043 2026-10-02T11:05:22.601580+00:00 gsd-2019-11043 https://cve.radiocsirt.org/vuln/icsa-26-027-02 ICSA-26-027-02 — Festo Didactic SE MES PC 2026-10-02T11:05:22.601590+00:00

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2441-1 openSUSE-SU-2019:2441-1 — Security update for php7 2026-10-02T11:05:22.601697+00:00

Security update for php7

 https://cve.radiocsirt.org/vuln/rhsa-2019:3287 RHSA-2019:3287 — Red Hat Security Advisory: php security update 2026-10-02T11:05:22.601713+00:00

php: underflow in env_path_info in fpm_main.c

 https://cve.radiocsirt.org/vuln/suse-su-2019:2809-1 SUSE-SU-2019:2809-1 — Security update for php7 2026-10-02T11:05:22.601728+00:00

Security update for php7

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11043 UBUNTU-CVE-2019-11043 2026-10-02T11:05:22.601742+00:00

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.