https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:31:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-01814 bdu:2017-01814 https://cve.radiocsirt.org/vuln/bdu:2017-01814 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0295 certfr-2024-avi-0295 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0295 https://cve.radiocsirt.org/vuln/cnvd-2017-06940 cnvd-2017-06940 https://cve.radiocsirt.org/vuln/cnvd-2017-06940 https://cve.radiocsirt.org/vuln/euvd-2026-207723 EUVD-2026-207723 https://cve.radiocsirt.org/vuln/euvd-2026-207723 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8923 <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string.</p> <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-8923 https://cve.radiocsirt.org/vuln/ghsa-wrc8-jp87-rq8j <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string.</p> <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string.</p> https://cve.radiocsirt.org/vuln/ghsa-wrc8-jp87-rq8j https://cve.radiocsirt.org/vuln/gsd-2017-8923 gsd-2017-8923 https://cve.radiocsirt.org/vuln/gsd-2017-8923 https://cve.radiocsirt.org/vuln/icsa-24-102-04 <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string. PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. Applications using NSS for certificate validat…</p> <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string. PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. Applications using NSS for certificate validat…</p> https://cve.radiocsirt.org/vuln/icsa-24-102-04 https://cve.radiocsirt.org/vuln/msrc_cve-2017-8923 msrc_CVE-2017-8923 https://cve.radiocsirt.org/vuln/msrc_cve-2017-8923 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0699-1 <p>Security update for php7</p> <p>Security update for php7</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0699-1 https://cve.radiocsirt.org/vuln/suse-su-2022:0530-1 <p>Security update for php74</p> <p>Security update for php74</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0530-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-8923 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4</p> <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4</p> <p>The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script&#39;s use of .= with a long string.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-8923 https://cve.radiocsirt.org/vuln/vde-2023-009 VDE-2023-009 https://cve.radiocsirt.org/vuln/vde-2023-009 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3760 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp Data ONTAP ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp Data ONTAP ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3760