https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:24:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01358 bdu:2016-01358 https://cve.radiocsirt.org/vuln/bdu:2016-01358 https://cve.radiocsirt.org/vuln/bell-cve-2015-6835 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-6835 https://cve.radiocsirt.org/vuln/certfr-2015-avi-387 certfr-2015-avi-387 https://cve.radiocsirt.org/vuln/certfr-2015-avi-387 https://cve.radiocsirt.org/vuln/cnvd-2015-06237 cnvd-2015-06237 https://cve.radiocsirt.org/vuln/cnvd-2015-06237 https://cve.radiocsirt.org/vuln/euvd-2026-94553 EUVD-2026-94553 https://cve.radiocsirt.org/vuln/euvd-2026-94553 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6835 <p>The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.</p> <p>The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-6835 https://cve.radiocsirt.org/vuln/ghsa-5qpr-hcf2-vwc2 <p>The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.</p> <p>The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.</p> https://cve.radiocsirt.org/vuln/ghsa-5qpr-hcf2-vwc2 https://cve.radiocsirt.org/vuln/gsd-2015-6835 gsd-2015-6835 https://cve.radiocsirt.org/vuln/gsd-2015-6835 https://cve.radiocsirt.org/vuln/rhsa-2016:0457 <p>php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()</p> <p>php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0457 https://cve.radiocsirt.org/vuln/suse-su-2015:1633-1 <p>Security update for php5</p> <p>Security update for php5</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1633-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6835 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6835 https://cve.radiocsirt.org/vuln/vde-2023-009 VDE-2023-009 https://cve.radiocsirt.org/vuln/vde-2023-009 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1425 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Code mit den Rechten des Dienstes auszuführen, um einen Denial of Service Zustand hervorrufen oder um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Code mit den Rechten des Dienstes auszuführen, um einen Denial of Service Zustand hervorrufen oder um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1425