Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

2 briefs RSS
critical advisory

PHP: Two critical vulnerabilities ahead of scheduled security release

PHP has announced two critical vulnerabilities rated CVSS v4.0 9.2 and a security release scheduled for 21 October at 14:00 UTC. Exploit details and affected versions are not yet confirmed by PHP.

exploited PoC PHP +20 security-release rce vulnerability
1t 2c updated
medium advisory

Varnish HTTP Cache Denial of Service Vulnerability

A vulnerability in Varnish HTTP Cache allows a remote, unauthenticated attacker to trigger a denial of service condition, potentially causing service instability or resource exhaustion.

Varnish HTTP Cache vulnerability dos webserver
1c