https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:35:46.688298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-17082 CVE-2018-17082 2026-10-08T10:35:46.691526+00:00

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.

 https://cve.radiocsirt.org/vuln/usn-3766-1 USN-3766-1 — php5, php7.0, php7.2 vulnerabilities 2026-10-08T10:35:46.691576+00:00

Affected: Ubuntu:14.04:LTS: php5, Ubuntu:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2

It was discovered that PHP incorrectly handled restarting certain child processes when php-fpm is used. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 18.04 LTS. (CVE-2015-9253)

It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2018-14851, CVE-2018-14883)