Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:42:53 +0000 certa-2009-avi-553 — De multiples vulnérabilités ont été découvertes dans PHP. L'exploitation de ces vulnérabilités permet de réaliser des a… https://cve.radiocsirt.org/vuln/certa-2009-avi-553 certa-2009-avi-553 https://cve.radiocsirt.org/vuln/certa-2009-avi-553 EUVD-2026-124641 https://cve.radiocsirt.org/vuln/euvd-2026-124641 EUVD-2026-124641 https://cve.radiocsirt.org/vuln/euvd-2026-124641 fkie_cve-2009-4142 https://cve.radiocsirt.org/vuln/fkie_cve-2009-4142 <p>The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.</p> <p>The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-4142 GHSA-q555-wmm9-43g3 https://cve.radiocsirt.org/vuln/ghsa-q555-wmm9-43g3 <p>The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.</p> <p>The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.</p> https://cve.radiocsirt.org/vuln/ghsa-q555-wmm9-43g3 gsd-2009-4142 https://cve.radiocsirt.org/vuln/gsd-2009-4142 gsd-2009-4142 https://cve.radiocsirt.org/vuln/gsd-2009-4142 RHSA-2010:0040 — Red Hat Security Advisory: php security update https://cve.radiocsirt.org/vuln/rhsa-2010:0040 <p>php: exif_read_data crash on corrupted JPEG files php: openssl extension: Incorrect verification of SSL certificate with NUL in name php: exif extension: Multiple missing sanity checks in EXIF file processing gd: insufficient input validation in _gdGetColors() PHP: resource exhaustion attack via upload requests with lots of files php: htmlspecialchars() insufficient checking of input for multi-byte encodings</p> <p>php: exif_read_data crash on corrupted JPEG files php: openssl extension: Incorrect verification of SSL certificate with NUL in name php: exif extension: Multiple missing sanity checks in EXIF file processing gd: insufficient input validation in _gdGetColors() PHP: resource exhaustion attack via upload requests with lots of files php: htmlspecialchars() insufficient checking of input for multi-byte encodings</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0040