https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:43:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02600 bdu:2022-02600 https://cve.radiocsirt.org/vuln/bdu:2022-02600 https://cve.radiocsirt.org/vuln/certa-2011-avi-162 certa-2011-avi-162 https://cve.radiocsirt.org/vuln/certa-2011-avi-162 https://cve.radiocsirt.org/vuln/euvd-2026-120196 EUVD-2026-120196 https://cve.radiocsirt.org/vuln/euvd-2026-120196 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3870 <p>The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.</p> <p>The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-3870 https://cve.radiocsirt.org/vuln/ghsa-gvvf-r2h9-2v8x <p>The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.</p> <p>The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.</p> https://cve.radiocsirt.org/vuln/ghsa-gvvf-r2h9-2v8x https://cve.radiocsirt.org/vuln/gsd-2010-3870 gsd-2010-3870 https://cve.radiocsirt.org/vuln/gsd-2010-3870 https://cve.radiocsirt.org/vuln/rhsa-2010:0919 <p>php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string php: NULL pointer dereference in XML-RPC extension php: LCG entropy weakness php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021) php: information leak vulnerability in var_export() php: session serializer session data injection vulnerability (MOPS-2010-060) php: XSS mitigation bypass via utf8_decode()</p> <p>php: XSS and SQL injection bypass via crafted overlong UTF-8 encoded string php: NULL pointer dereference in XML-RPC extension php: LCG entropy weakness php: fnmatch long pattern stack memory exhaustion (MOPS-2010-021) php: information leak vulnerability in var_export() php: session serializer session data injection vulnerability (MOPS-2010-060) php: XSS mitigation bypass via utf8_decode()</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0919