https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:17:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02597 bdu:2022-02597 https://cve.radiocsirt.org/vuln/bdu:2022-02597 https://cve.radiocsirt.org/vuln/certa-2011-avi-162 certa-2011-avi-162 https://cve.radiocsirt.org/vuln/certa-2011-avi-162 https://cve.radiocsirt.org/vuln/euvd-2026-145284 EUVD-2026-145284 https://cve.radiocsirt.org/vuln/euvd-2026-145284 https://cve.radiocsirt.org/vuln/fkie_cve-2006-7243 <p>PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.</p> <p>PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2006-7243 https://cve.radiocsirt.org/vuln/ghsa-qxh9-g3ww-hcvc <p>PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.</p> <p>PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.</p> https://cve.radiocsirt.org/vuln/ghsa-qxh9-g3ww-hcvc https://cve.radiocsirt.org/vuln/gsd-2006-7243 gsd-2006-7243 https://cve.radiocsirt.org/vuln/gsd-2006-7243 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 https://cve.radiocsirt.org/vuln/rhsa-2013:1307 <p>php: paths with NULL character were considered valid PHP: sapi_header_op() %0D sequence handling security bypass php: PG(magic_quote_gpc) was not restored on shutdown php: Integer Signedness issues in _php_stream_scandir php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files php: hostname check bypassing vulnerability in SSL client</p> <p>php: paths with NULL character were considered valid PHP: sapi_header_op() %0D sequence handling security bypass php: PG(magic_quote_gpc) was not restored on shutdown php: Integer Signedness issues in _php_stream_scandir php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files php: hostname check bypassing vulnerability in SSL client</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1307 https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1 <p>Security update for php53</p> <p>Security update for php53</p> https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1