https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:55:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10571 bdu:2024-10571 https://cve.radiocsirt.org/vuln/bdu:2024-10571 https://cve.radiocsirt.org/vuln/bell-cve-2024-8932 <p><strong>Affected:</strong> Alpaquita:23: php81, Alpaquita:stream: php83</p> <p><strong>Affected:</strong> Alpaquita:23: php81, Alpaquita:stream: php83</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-8932 https://cve.radiocsirt.org/vuln/bit-libphp-2024-8932 <p><strong>Affected:</strong> Bitnami: libphp</p> <p>In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</p> <p><strong>Affected:</strong> Bitnami: libphp</p> <p>In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</p> https://cve.radiocsirt.org/vuln/bit-libphp-2024-8932 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1007 certfr-2024-avi-1007 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1007 https://cve.radiocsirt.org/vuln/euvd-2026-258731 EUVD-2026-258731 https://cve.radiocsirt.org/vuln/euvd-2026-258731 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8932 <p>In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</p> <p>In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8932 https://cve.radiocsirt.org/vuln/msrc_cve-2024-8932 msrc_CVE-2024-8932 https://cve.radiocsirt.org/vuln/msrc_cve-2024-8932 https://cve.radiocsirt.org/vuln/oesa-2024-2478 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: php, openEuler:22.03-LTS-SP1: php, openEuler:24.03-LTS: php, openEuler:22.03-LTS-SP4: php, openEuler:22.03-LTS-SP3: php</p> <p>PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es): (CVE-2024-11233) (CVE-2024-11234) (CVE-2024-11236) (CVE-2024-8929) (CVE-2024-8932)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: php, openEuler:22.03-LTS-SP1: php, openEuler:24.03-LTS: php, openEuler:22.03-LTS-SP4: php, openEuler:22.03-LTS-SP3: php</p> <p>PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es): (CVE-2024-11233) (CVE-2024-11234) (CVE-2024-11236) (CVE-2024-8929) (CVE-2024-8932)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2478 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14521-1 <p>php8-8.3.14-1.1 on GA media</p> <p>php8-8.3.14-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14521-1 https://cve.radiocsirt.org/vuln/suse-su-2024:4136-1 <p>Security update for php8</p> <p>Security update for php8</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4136-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-8932 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3</p> <p>In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3</p> <p>In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-8932 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3519 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PHP ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen und einen Spoofing-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PHP ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen und einen Spoofing-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3519