https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:27:37 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-240 certfr-2016-avi-240 https://cve.radiocsirt.org/vuln/certfr-2016-avi-240 https://cve.radiocsirt.org/vuln/cnvd-2016-04950 cnvd-2016-04950 https://cve.radiocsirt.org/vuln/cnvd-2016-04950 https://cve.radiocsirt.org/vuln/euvd-2026-85212 EUVD-2026-85212 https://cve.radiocsirt.org/vuln/euvd-2026-85212 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5385 <p>PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application&#39;s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(&#39;HTTP_PROXY&#39;) call or (2) a CGI configuration of PHP, aka an &#34;httpoxy&#34; issue.</p> <p>PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application&#39;s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(&#39;HTTP_PROXY&#39;) call or (2) a CGI configuration of PHP, aka an &#34;httpoxy&#34; issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5385 https://cve.radiocsirt.org/vuln/fsa-202302 <p>FactoryViews bundles many third-party applications which are used in background processes to provide the software&#39;s features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.</p> <p>FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.</p> <p>At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.</p> <p>FactoryViews bundles many third-party applications which are used in background processes to provide the software&#39;s features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.</p> <p>FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.</p> <p>At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.</p> https://cve.radiocsirt.org/vuln/fsa-202302 https://cve.radiocsirt.org/vuln/gsd-2016-5385 gsd-2016-5385 https://cve.radiocsirt.org/vuln/gsd-2016-5385 https://cve.radiocsirt.org/vuln/icsa-26-027-02 <p>MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.</p> <p>MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic&#39;s Factory Control Panel application.</p> <p>MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.</p> <p>MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic&#39;s Factory Control Panel application.</p> https://cve.radiocsirt.org/vuln/icsa-26-027-02 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11175-1 <p>platformsh-cli-3.67.2-1.2 on GA media</p> <p>platformsh-cli-3.67.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11175-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1609 <p>PHP: sets environmental variable based on user supplied Proxy request header</p> <p>PHP: sets environmental variable based on user supplied Proxy request header</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1609 https://cve.radiocsirt.org/vuln/suse-su-2016:1842-1 <p>Security update for php5</p> <p>Security update for php5</p> https://cve.radiocsirt.org/vuln/suse-su-2016:1842-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5385 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5, Ubuntu:16.04:LTS: php7.0</p> <p>PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application&#39;s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(&#39;HTTP_PROXY&#39;) call or (2) a CGI configuration of PHP, aka an &#34;httpoxy&#34; issue.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5, Ubuntu:16.04:LTS: php7.0</p> <p>PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application&#39;s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(&#39;HTTP_PROXY&#39;) call or (2) a CGI configuration of PHP, aka an &#34;httpoxy&#34; issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5385 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2522 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in mehreren Webserver Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in mehreren Webserver Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2522