Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 18:47:33 +0000 cnvd-2020-23052 https://cve.radiocsirt.org/vuln/cnvd-2020-23052 cnvd-2020-23052 https://cve.radiocsirt.org/vuln/cnvd-2020-23052 EUVD-2026-40068 https://cve.radiocsirt.org/vuln/euvd-2026-40068 EUVD-2026-40068 https://cve.radiocsirt.org/vuln/euvd-2026-40068 fkie_cve-2020-10806 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10806 <p>eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.</p> <p>eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10806 GHSA-54p5-gxq6-j98g — eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type https://cve.radiocsirt.org/vuln/ghsa-54p5-gxq6-j98g <p><strong>Affected:</strong> Packagist: ezsystems/ezpublish-kernel, Packagist: ezsystems/ezpublish-legacy</p> <p>eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.</p> <p><strong>Affected:</strong> Packagist: ezsystems/ezpublish-kernel, Packagist: ezsystems/ezpublish-legacy</p> <p>eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.</p> https://cve.radiocsirt.org/vuln/ghsa-54p5-gxq6-j98g gsd-2020-10806 https://cve.radiocsirt.org/vuln/gsd-2020-10806 gsd-2020-10806 https://cve.radiocsirt.org/vuln/gsd-2020-10806