https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:11:38 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-29844 cnvd-2021-29844 https://cve.radiocsirt.org/vuln/cnvd-2021-29844 https://cve.radiocsirt.org/vuln/euvd-2026-42544 EUVD-2026-42544 https://cve.radiocsirt.org/vuln/euvd-2026-42544 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14933 <p>compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object injection are not satisfied: existence of a PHP magic method (such as __wakeup or __destruct), and any attack-relevant classes must be declared before unserialize is called (or must be autoloaded).</p> <p>compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object injection are not satisfied: existence of a PHP magic method (such as __wakeup or __destruct), and any attack-relevant classes must be declared before unserialize is called (or must be autoloaded).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14933 https://cve.radiocsirt.org/vuln/ghsa-gh2w-wqm3-32m4 <p>compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request.</p> <p>compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request.</p> https://cve.radiocsirt.org/vuln/ghsa-gh2w-wqm3-32m4 https://cve.radiocsirt.org/vuln/gsd-2020-14933 gsd-2020-14933 https://cve.radiocsirt.org/vuln/gsd-2020-14933