https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:28:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04432 bdu:2024-04432 https://cve.radiocsirt.org/vuln/bdu:2024-04432 https://cve.radiocsirt.org/vuln/bell-cve-2024-4577 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2024-4577 https://cve.radiocsirt.org/vuln/bit-libphp-2024-4577 <p><strong>Affected:</strong> Bitnami: libphp</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use &#34;Best-Fit&#34; behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.</p> <p><strong>Affected:</strong> Bitnami: libphp</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use &#34;Best-Fit&#34; behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.</p> https://cve.radiocsirt.org/vuln/bit-libphp-2024-4577 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0468 certfr-2024-avi-0468 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0468 https://cve.radiocsirt.org/vuln/euvd-2026-255632 EUVD-2026-255632 https://cve.radiocsirt.org/vuln/euvd-2026-255632 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4577 <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use &#34;Best-Fit&#34; behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use &#34;Best-Fit&#34; behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4577 https://cve.radiocsirt.org/vuln/ghsa-vxpp-6299-mxw3 <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use &#34;Best-Fit&#34; behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use &#34;Best-Fit&#34; behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.</p> https://cve.radiocsirt.org/vuln/ghsa-vxpp-6299-mxw3 https://cve.radiocsirt.org/vuln/msrc_cve-2024-4577 msrc_CVE-2024-4577 https://cve.radiocsirt.org/vuln/msrc_cve-2024-4577 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14376-1 <p>php8-8.3.12-1.1 on GA media</p> <p>php8-8.3.12-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14376-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1320 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1320