https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:37:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02642 bdu:2022-02642 https://cve.radiocsirt.org/vuln/bdu:2022-02642 https://cve.radiocsirt.org/vuln/cnvd-2015-01028 cnvd-2015-01028 https://cve.radiocsirt.org/vuln/cnvd-2015-01028 https://cve.radiocsirt.org/vuln/euvd-2026-108715 EUVD-2026-108715 https://cve.radiocsirt.org/vuln/euvd-2026-108715 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6501 <p>The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.</p> <p>The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-6501 https://cve.radiocsirt.org/vuln/fsa-202402 <p>MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.</p> <p>MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic&#39;s Factory Control Panel application.</p> <p>MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.</p> <p>MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic&#39;s Factory Control Panel application.</p> https://cve.radiocsirt.org/vuln/fsa-202402 https://cve.radiocsirt.org/vuln/ghsa-x247-pp49-3c7r <p>The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.</p> <p>The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.</p> https://cve.radiocsirt.org/vuln/ghsa-x247-pp49-3c7r https://cve.radiocsirt.org/vuln/gsd-2013-6501 gsd-2013-6501 https://cve.radiocsirt.org/vuln/gsd-2013-6501 https://cve.radiocsirt.org/vuln/icsa-26-027-02 <p>MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.</p> <p>MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic&#39;s Factory Control Panel application.</p> <p>MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.</p> <p>MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic&#39;s Factory Control Panel application.</p> https://cve.radiocsirt.org/vuln/icsa-26-027-02 https://cve.radiocsirt.org/vuln/suse-su-2015:0370-1 <p>Security update for php53</p> <p>Security update for php53</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0370-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6501 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0</p> <p>The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0</p> <p>The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6501 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0069 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0069