https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:06:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02632 bdu:2022-02632 https://cve.radiocsirt.org/vuln/bdu:2022-02632 https://cve.radiocsirt.org/vuln/bell-cve-2013-4248 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2013-4248 https://cve.radiocsirt.org/vuln/certa-2013-avi-478 certa-2013-avi-478 https://cve.radiocsirt.org/vuln/certa-2013-avi-478 https://cve.radiocsirt.org/vuln/euvd-2026-107278 EUVD-2026-107278 https://cve.radiocsirt.org/vuln/euvd-2026-107278 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4248 <p>The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a &#39;\0&#39; character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> <p>The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a &#39;\0&#39; character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4248 https://cve.radiocsirt.org/vuln/ghsa-hhfm-3287-cc2v <p>The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a &#39;\0&#39; character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> <p>The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a &#39;\0&#39; character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> https://cve.radiocsirt.org/vuln/ghsa-hhfm-3287-cc2v https://cve.radiocsirt.org/vuln/gsd-2013-4248 gsd-2013-4248 https://cve.radiocsirt.org/vuln/gsd-2013-4248 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> <p>apache2-mod_php7-7.0.14-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10290-1 https://cve.radiocsirt.org/vuln/rhsa-2013:1307 <p>php: paths with NULL character were considered valid PHP: sapi_header_op() %0D sequence handling security bypass php: PG(magic_quote_gpc) was not restored on shutdown php: Integer Signedness issues in _php_stream_scandir php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files php: hostname check bypassing vulnerability in SSL client</p> <p>php: paths with NULL character were considered valid PHP: sapi_header_op() %0D sequence handling security bypass php: PG(magic_quote_gpc) was not restored on shutdown php: Integer Signedness issues in _php_stream_scandir php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files php: hostname check bypassing vulnerability in SSL client</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1307 https://cve.radiocsirt.org/vuln/suse-su-2015:0370-1 <p>Security update for php53</p> <p>Security update for php53</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0370-1