Most recent entries from all

bdu:2021-06176

Withdrawn: BELL-CVE-2021-21706 — CVE-2021-21706 does not affect BellSoft software

Withdrawn by the publisher.

BIT-libphp-2021-21706 — ZipArchive::extractTo may extract outside of destination dir

Affected: Bitnami: libphp

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.

certfr-2021-avi-731 — De multiples vulnérabilités ont été découvertes dans PHP. Elles permetttent à un attaquant de provoquer un problème de…

certfr-2021-avi-731

EUVD-2026-175411

fkie_cve-2021-21706

FSA-202302 — Festo: Several vulnerabilities in FactoryViews

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

GHSA-x4g4-47f7-vvq4

gsd-2021-21706

ICSA-26-027-02 — Festo Didactic SE MES PC

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

openSUSE-SU-2024:11167-1 — php7-7.4.24-1.1 on GA media

php7-7.4.24-1.1 on GA media

SUSE-SU-2022:4068-1 — Security update for php74

Security update for php74

Withdrawn: UBUNTU-CVE-2021-21706

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: php8.1