https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:55:50 +0000 https://cve.radiocsirt.org/vuln/certfr-2014-avi-443 certfr-2014-avi-443 https://cve.radiocsirt.org/vuln/certfr-2014-avi-443 https://cve.radiocsirt.org/vuln/euvd-2026-107677 EUVD-2026-107677 https://cve.radiocsirt.org/vuln/euvd-2026-107677 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4701 <p>Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.</p> <p>Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4701 https://cve.radiocsirt.org/vuln/ghsa-5qp6-78pr-gv8c <p><strong>Affected:</strong> Packagist: openid/php-openid, Packagist: typo3/cms</p> <p>Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.</p> <p><strong>Affected:</strong> Packagist: openid/php-openid, Packagist: typo3/cms</p> <p>Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/ghsa-5qp6-78pr-gv8c https://cve.radiocsirt.org/vuln/gsd-2013-4701 gsd-2013-4701 https://cve.radiocsirt.org/vuln/gsd-2013-4701 https://cve.radiocsirt.org/vuln/jvndb-2013-000080 <p>The PHP OpenID Library contains an XML external entity injection vulnerability. Takeshi Terada from Mitsui Bussan Secure Directions, Inc. and Kosuke Ebihara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>The PHP OpenID Library contains an XML external entity injection vulnerability. Takeshi Terada from Mitsui Bussan Secure Directions, Inc. and Kosuke Ebihara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2013-000080 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4701 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php-openid, Ubuntu:16.04:LTS: php-openid</p> <p>Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php-openid, Ubuntu:16.04:LTS: php-openid</p> <p>Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4701