https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:21 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-05444 cnvd-2015-05444 https://cve.radiocsirt.org/vuln/cnvd-2015-05444 https://cve.radiocsirt.org/vuln/euvd-2026-93197 EUVD-2026-93197 https://cve.radiocsirt.org/vuln/euvd-2026-93197 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5161 <p>The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.</p> <p>The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5161 https://cve.radiocsirt.org/vuln/ghsa-xp8p-9rq5-4wgv <p><strong>Affected:</strong> Packagist: zendframework/zendframework, Packagist: zendframework/zendframework1, Packagist: zendframework/zendxml</p> <p>The `Zend_Xml_Security::scan` in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.</p> <p><strong>Affected:</strong> Packagist: zendframework/zendframework, Packagist: zendframework/zendframework1, Packagist: zendframework/zendxml</p> <p>The `Zend_Xml_Security::scan` in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.</p> https://cve.radiocsirt.org/vuln/ghsa-xp8p-9rq5-4wgv https://cve.radiocsirt.org/vuln/gsd-2015-5161 gsd-2015-5161 https://cve.radiocsirt.org/vuln/gsd-2015-5161 https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1 <p>Security update for php53</p> <p>Security update for php53</p> https://cve.radiocsirt.org/vuln/suse-su-2016:1638-1