https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:45:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-136700 EUVD-2026-136700 https://cve.radiocsirt.org/vuln/euvd-2026-136700 https://cve.radiocsirt.org/vuln/fkie_cve-2007-4782 <p>PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a &#34;*[1]e&#34; value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.</p> <p>PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a &#34;*[1]e&#34; value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-4782 https://cve.radiocsirt.org/vuln/ghsa-9q3v-wm75-qjw9 <p>PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a &#34;*[1]e&#34; value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.</p> <p>PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a &#34;*[1]e&#34; value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-9q3v-wm75-qjw9 https://cve.radiocsirt.org/vuln/gsd-2007-4782 gsd-2007-4782 https://cve.radiocsirt.org/vuln/gsd-2007-4782 https://cve.radiocsirt.org/vuln/rhsa-2008:0505 <p>php crash in glob() and fnmatch() functions php htmlentities/htmlspecialchars multibyte sequences php session ID leakage PHP multibyte shell escape flaw mysql: privilege escalation via DATA/INDEX DIRECTORY directives PHP 32 bit weak random seed PHP weak 64 bit random seed</p> <p>php crash in glob() and fnmatch() functions php htmlentities/htmlspecialchars multibyte sequences php session ID leakage PHP multibyte shell escape flaw mysql: privilege escalation via DATA/INDEX DIRECTORY directives PHP 32 bit weak random seed PHP weak 64 bit random seed</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0505