https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:34:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02525 bdu:2022-02525 https://cve.radiocsirt.org/vuln/bdu:2022-02525 https://cve.radiocsirt.org/vuln/bell-cve-2015-7804 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-7804 https://cve.radiocsirt.org/vuln/certfr-2015-avi-534 certfr-2015-avi-534 https://cve.radiocsirt.org/vuln/certfr-2015-avi-534 https://cve.radiocsirt.org/vuln/cnvd-2015-07259 cnvd-2015-07259 https://cve.radiocsirt.org/vuln/cnvd-2015-07259 https://cve.radiocsirt.org/vuln/euvd-2026-95224 EUVD-2026-95224 https://cve.radiocsirt.org/vuln/euvd-2026-95224 https://cve.radiocsirt.org/vuln/fkie_cve-2015-7804 <p>Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.</p> <p>Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-7804 https://cve.radiocsirt.org/vuln/ghsa-w62r-v45f-552v <p>Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.</p> <p>Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.</p> https://cve.radiocsirt.org/vuln/ghsa-w62r-v45f-552v https://cve.radiocsirt.org/vuln/gsd-2015-7804 gsd-2015-7804 https://cve.radiocsirt.org/vuln/gsd-2015-7804 https://cve.radiocsirt.org/vuln/rhsa-2016:0457 <p>php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()</p> <p>php: segmentation fault in Phar::convertToData on invalid file php: buffer overflow and stack smashing error in phar_fix_filepath php: Use After Free Vulnerability in unserialize() php: dangling pointer in the unserialization of ArrayObject items php: Files from archive can be extracted outside of destination directory using phar php: multiple unserialization use-after-free issues php: use-after-free vulnerability in session deserializer php: SOAP serialize_function_call() type confusion php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in XSLTProcessor class php: NULL pointer dereference in phar_get_fp_offset() php: uninitialized pointer in phar_make_dirstream()</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0457 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7804 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5</p> <p>Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-7804