https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:26:35.172214+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2006-5752 Withdrawn: BELL-CVE-2006-5752 — CVE-2006-5752 does not affect BellSoft software 2026-10-03T02:26:35.342228+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certa-2007-avi-339 certa-2007-avi-339 — Plusieurs vulnérabilités sont présentes dans Apache et permettent à un utilisateur local de provoquer un déni de servic… 2026-10-03T02:26:35.342277+00:00 certa-2007-avi-339 https://cve.radiocsirt.org/vuln/euvd-2026-143873 EUVD-2026-143873 2026-10-03T02:26:35.342295+00:00 EUVD-2026-143873 https://cve.radiocsirt.org/vuln/fkie_cve-2006-5752 fkie_cve-2006-5752 2026-10-03T02:26:35.342308+00:00

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

 https://cve.radiocsirt.org/vuln/ghsa-jp93-qpwr-857r GHSA-jp93-qpwr-857r 2026-10-03T02:26:35.342339+00:00

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

 https://cve.radiocsirt.org/vuln/gsd-2006-5752 gsd-2006-5752 2026-10-03T02:26:35.342356+00:00 gsd-2006-5752 https://cve.radiocsirt.org/vuln/jvndb-2007-000773 jvndb-2007-000773 2026-10-03T02:26:35.342367+00:00

When Hitachi Web Server receives a request that contains malicious scripts, they are inserted into the server-satus page the Server automatically creates. This allows the inserted malicious scripts to be executed on the client machines. The vulnerability does not affect the product if the server-status reporting feature is disabled.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10623-1 openSUSE-SU-2024:10623-1 — apache2-2.4.49-1.1 on GA media 2026-10-03T02:26:35.342384+00:00

apache2-2.4.49-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2007:0532 RHSA-2007:0532 — Red Hat Security Advisory: apache security update 2026-10-03T02:26:35.342416+00:00

httpd mod_status XSS httpd scoreboard lack of PID protection