https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:01:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02526 bdu:2022-02526 https://cve.radiocsirt.org/vuln/bdu:2022-02526 https://cve.radiocsirt.org/vuln/bell-cve-2015-7803 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-7803 https://cve.radiocsirt.org/vuln/certfr-2015-avi-534 certfr-2015-avi-534 https://cve.radiocsirt.org/vuln/certfr-2015-avi-534 https://cve.radiocsirt.org/vuln/cnvd-2015-07258 cnvd-2015-07258 https://cve.radiocsirt.org/vuln/cnvd-2015-07258 https://cve.radiocsirt.org/vuln/euvd-2026-95235 EUVD-2026-95235 https://cve.radiocsirt.org/vuln/euvd-2026-95235 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7803 <p>The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.</p> <p>The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-7803 https://cve.radiocsirt.org/vuln/ghsa-xcr5-h66f-mcfq <p>The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.</p> <p>The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.</p> https://cve.radiocsirt.org/vuln/ghsa-xcr5-h66f-mcfq https://cve.radiocsirt.org/vuln/gsd-2015-7803 gsd-2015-7803 https://cve.radiocsirt.org/vuln/gsd-2015-7803 https://cve.radiocsirt.org/vuln/rhsa-2016:0457 <p>php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()</p> <p>php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0457 https://cve.radiocsirt.org/vuln/suse-su-2016:0284-1 <p>Security update for php5</p> <p>Security update for php5</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0284-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7803 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7803