https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:01:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-103006 EUVD-2026-103006 https://cve.radiocsirt.org/vuln/euvd-2026-103006 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8089 <p>SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.</p> <p>SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-8089 https://cve.radiocsirt.org/vuln/ghsa-qh9w-r7g5-q939 <p><strong>Affected:</strong> Packagist: zendframework/zendframework1, Packagist: zendframework/zend-db, Packagist: zendframework/zendframework</p> <p>SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.</p> <p><strong>Affected:</strong> Packagist: zendframework/zendframework1, Packagist: zendframework/zend-db, Packagist: zendframework/zendframework</p> <p>SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.</p> https://cve.radiocsirt.org/vuln/ghsa-qh9w-r7g5-q939 https://cve.radiocsirt.org/vuln/gsd-2014-8089 gsd-2014-8089 https://cve.radiocsirt.org/vuln/gsd-2014-8089 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8089 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zend-framework</p> <p>SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: zend-framework</p> <p>SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-8089