https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:51:52.441849+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2007-4465 Withdrawn: BELL-CVE-2007-4465 — CVE-2007-4465 does not affect BellSoft software 2026-10-03T14:51:52.607625+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certa-2007-avi-339 certa-2007-avi-339 — Plusieurs vulnérabilités sont présentes dans Apache et permettent à un utilisateur local de provoquer un déni de servic… 2026-10-03T14:51:52.607683+00:00 certa-2007-avi-339 https://cve.radiocsirt.org/vuln/euvd-2026-211043 EUVD-2026-211043 2026-10-03T14:51:52.607702+00:00 EUVD-2026-211043 https://cve.radiocsirt.org/vuln/fkie_cve-2007-4465 fkie_cve-2007-4465 2026-10-03T14:51:52.607715+00:00

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

 https://cve.radiocsirt.org/vuln/ghsa-7286-985c-74qv GHSA-7286-985c-74qv 2026-10-03T14:51:52.607744+00:00

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

 https://cve.radiocsirt.org/vuln/gsd-2007-4465 gsd-2007-4465 2026-10-03T14:51:52.607761+00:00 gsd-2007-4465 https://cve.radiocsirt.org/vuln/jvndb-2007-001022 jvndb-2007-001022 2026-10-03T14:51:52.607772+00:00

The mod_autoindex.c module in Apache HTTP Server is vulnerable to a cross-site scripting attack. When the charset on a server-generated page is undefined, the vulnerability allows attackers to inject arbitrary scripts or HTML via the P parameter using the UTF-7 charset.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10623-1 openSUSE-SU-2024:10623-1 — apache2-2.4.49-1.1 on GA media 2026-10-03T14:51:52.607788+00:00

apache2-2.4.49-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2007:0911 RHSA-2007:0911 — Red Hat Security Advisory: httpd security update 2026-10-03T14:51:52.607820+00:00

httpd: out of bounds read mod_autoindex XSS