https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:56:00 +0000 https://cve.radiocsirt.org/vuln/certa-2007-avi-076 certa-2007-avi-076 https://cve.radiocsirt.org/vuln/certa-2007-avi-076 https://cve.radiocsirt.org/vuln/euvd-2026-132947 EUVD-2026-132947 https://cve.radiocsirt.org/vuln/euvd-2026-132947 https://cve.radiocsirt.org/vuln/fkie_cve-2007-0908 <p>The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.</p> <p>The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-0908 https://cve.radiocsirt.org/vuln/ghsa-cp4j-q49w-68jf <p>The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.</p> <p>The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.</p> https://cve.radiocsirt.org/vuln/ghsa-cp4j-q49w-68jf https://cve.radiocsirt.org/vuln/gsd-2007-0908 gsd-2007-0908 https://cve.radiocsirt.org/vuln/gsd-2007-0908 https://cve.radiocsirt.org/vuln/rhsa-2007:0076 <p>security flaw security flaw security flaw security flaw security flaw security flaw php session extension information leak php session extension global variable clobber php imap_mail_compose() buffer overflow via type.parameters</p> <p>security flaw security flaw security flaw security flaw security flaw security flaw php session extension information leak php session extension global variable clobber php imap_mail_compose() buffer overflow via type.parameters</p> https://cve.radiocsirt.org/vuln/rhsa-2007:0076