https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:01:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02538 bdu:2022-02538 https://cve.radiocsirt.org/vuln/bdu:2022-02538 https://cve.radiocsirt.org/vuln/certfr-2016-avi-316 certfr-2016-avi-316 https://cve.radiocsirt.org/vuln/certfr-2016-avi-316 https://cve.radiocsirt.org/vuln/cnvd-2016-04368 cnvd-2016-04368 https://cve.radiocsirt.org/vuln/cnvd-2016-04368 https://cve.radiocsirt.org/vuln/euvd-2026-85379 EUVD-2026-85379 https://cve.radiocsirt.org/vuln/euvd-2026-85379 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5773 <p>php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.</p> <p>php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5773 https://cve.radiocsirt.org/vuln/ghsa-7w96-3v7r-6g9j <p>php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.</p> <p>php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.</p> https://cve.radiocsirt.org/vuln/ghsa-7w96-3v7r-6g9j https://cve.radiocsirt.org/vuln/gsd-2016-5773 gsd-2016-5773 https://cve.radiocsirt.org/vuln/gsd-2016-5773 https://cve.radiocsirt.org/vuln/rhsa-2016:2750 <p>gd: incorrect boundary adjustment in _gdContributionsCalc php: ZipArchive:: extractTo allows for directory traversal when creating directories pcre: heap buffer overflow in compile_branch() pcre: heap buffer over-read in pcre_compile2() (8.37/23) pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19) pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20) pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) pcre: stack overflow caused by mishandled group empty match (8.38/11) pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) pcre: Buffer overflow caused by duplicate named references (8.38/36) pcre: Buffer overflow caused by repeated conditional group (8.38/3) pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30) pcre: Buffer overflow caused by lookbehind assertion (8.38/6) pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) pcre: inefficient posix character class syntax check (8.38/16) pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) pcre: Buffer overflow caused by duplicate named references (8.38/36) php: type confusion issue i…</p> <p>gd: incorrect boundary adjustment in _gdContributionsCalc php: ZipArchive:: extractTo allows for directory traversal when creating directories pcre: heap buffer overflow in compile_branch() pcre: heap buffer over-read in pcre_compile2() (8.37/23) pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19) pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20) pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) pcre: stack overflow caused by mishandled group empty match (8.38/11) pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) pcre: Buffer overflow caused by duplicate named references (8.38/36) pcre: Buffer overflow caused by repeated conditional group (8.38/3) pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30) pcre: Buffer overflow caused by lookbehind assertion (8.38/6) pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18) pcre: inefficient posix character class syntax check (8.38/16) pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) pcre: Buffer overflow caused by duplicate named references (8.38/36) php: type confusion issue i…</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2750 https://cve.radiocsirt.org/vuln/suse-su-2016:2975-1 <p>Security update for php5</p> <p>Security update for php5</p> https://cve.radiocsirt.org/vuln/suse-su-2016:2975-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5773 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5, Ubuntu:16.04:LTS: php7.0</p> <p>php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: php5, Ubuntu:16.04:LTS: php7.0</p> <p>php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5773