Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:23:41 +0000 bdu:2024-05512 https://cve.radiocsirt.org/vuln/bdu:2024-05512 bdu:2024-05512 https://cve.radiocsirt.org/vuln/bdu:2024-05512 Withdrawn: BELL-CVE-2024-5585 — CVE-2024-5585 does not affect BellSoft software https://cve.radiocsirt.org/vuln/bell-cve-2024-5585 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2024-5585 BIT-libphp-2024-5585 — Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) https://cve.radiocsirt.org/vuln/bit-libphp-2024-5585 <p><strong>Affected:</strong> Bitnami: libphp</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.</p> <p><strong>Affected:</strong> Bitnami: libphp</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.</p> https://cve.radiocsirt.org/vuln/bit-libphp-2024-5585 certfr-2024-avi-0468 — De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoque… https://cve.radiocsirt.org/vuln/certfr-2024-avi-0468 certfr-2024-avi-0468 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0468 EUVD-2026-217490 https://cve.radiocsirt.org/vuln/euvd-2026-217490 EUVD-2026-217490 https://cve.radiocsirt.org/vuln/euvd-2026-217490 fkie_cve-2024-5585 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5585 <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.</p> <p>In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5585 msrc_CVE-2024-5585 — Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) https://cve.radiocsirt.org/vuln/msrc_cve-2024-5585 msrc_CVE-2024-5585 https://cve.radiocsirt.org/vuln/msrc_cve-2024-5585 WID-SEC-W-2024-1320 — PHP: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1320 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1320