https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:09:43 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-593 certa-2008-avi-593 https://cve.radiocsirt.org/vuln/certa-2008-avi-593 https://cve.radiocsirt.org/vuln/euvd-2026-130658 EUVD-2026-130658 https://cve.radiocsirt.org/vuln/euvd-2026-130658 https://cve.radiocsirt.org/vuln/fkie_cve-2008-5814 <p>Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.</p> <p>Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-5814 https://cve.radiocsirt.org/vuln/ghsa-qmvx-3c3m-8hg9 <p>Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.</p> <p>Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.</p> https://cve.radiocsirt.org/vuln/ghsa-qmvx-3c3m-8hg9 https://cve.radiocsirt.org/vuln/gsd-2008-5814 gsd-2008-5814 https://cve.radiocsirt.org/vuln/gsd-2008-5814 https://cve.radiocsirt.org/vuln/jvndb-2008-000084 <p>PHP contains a cross-site scripting vulnerability. PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Tomoki Sanaki of International Network Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>PHP contains a cross-site scripting vulnerability. PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Tomoki Sanaki of International Network Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2008-000084 https://cve.radiocsirt.org/vuln/rhsa-2009:0338 <p>php: buffer overflow in the imageloadfont function in gd extension php: FastCGI module DoS via multiple dots preceding the extension php: libgd imagerotate() array index error memory disclosure php: Heap-based buffer overflow in the mbstring extension via crafted string containing a HTML entity (arb code execution) php: XSS via PHP error messages PHP mbstring.func_overload web server denial of service</p> <p>php: buffer overflow in the imageloadfont function in gd extension php: FastCGI module DoS via multiple dots preceding the extension php: libgd imagerotate() array index error memory disclosure php: Heap-based buffer overflow in the mbstring extension via crafted string containing a HTML entity (arb code execution) php: XSS via PHP error messages PHP mbstring.func_overload web server denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2009:0338