https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:17:39 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-358 certa-2012-avi-358 https://cve.radiocsirt.org/vuln/certa-2012-avi-358 https://cve.radiocsirt.org/vuln/euvd-2026-116699 EUVD-2026-116699 https://cve.radiocsirt.org/vuln/euvd-2026-116699 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4153 <p>PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.</p> <p>PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4153 https://cve.radiocsirt.org/vuln/ghsa-rh93-rrxr-rjg3 <p>PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.</p> <p>PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.</p> https://cve.radiocsirt.org/vuln/ghsa-rh93-rrxr-rjg3 https://cve.radiocsirt.org/vuln/gsd-2011-4153 gsd-2011-4153 https://cve.radiocsirt.org/vuln/gsd-2011-4153 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 https://cve.radiocsirt.org/vuln/rhsa-2012:1045 <p>php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: strtotime timezone memory leak php: $_FILES array indexes corruption php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h</p> <p>php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: strtotime timezone memory leak php: $_FILES array indexes corruption php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1045