https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:11:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02622 bdu:2022-02622 https://cve.radiocsirt.org/vuln/bdu:2022-02622 https://cve.radiocsirt.org/vuln/bell-cve-2012-2336 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2012-2336 https://cve.radiocsirt.org/vuln/euvd-2026-111062 EUVD-2026-111062 https://cve.radiocsirt.org/vuln/euvd-2026-111062 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2336 <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;T&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;T&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2336 https://cve.radiocsirt.org/vuln/ghsa-gjrg-p28q-p9w2 <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;T&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> <p>sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the &#39;T&#39; case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.</p> https://cve.radiocsirt.org/vuln/ghsa-gjrg-p28q-p9w2 https://cve.radiocsirt.org/vuln/gsd-2012-2336 gsd-2012-2336 https://cve.radiocsirt.org/vuln/gsd-2012-2336 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 https://cve.radiocsirt.org/vuln/rhsa-2012:1045 <p>php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: strtotime timezone memory leak php: $_FILES array indexes corruption php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h</p> <p>php: zend_strndup() NULL pointer dereference may cause DoS php: XSLT file writing vulnerability php: strtotime timezone memory leak php: $_FILES array indexes corruption php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1045