https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:40:44.741998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-560 certa-2007-avi-560 — Deux vulnérabilités dans IBM HTTP Server permettent à un utilisateur malintentionné de réaliser de l'injection de code… 2026-10-03T22:40:44.745730+00:00 certa-2007-avi-560 https://cve.radiocsirt.org/vuln/euvd-2026-137900 EUVD-2026-137900 2026-10-03T22:40:44.745766+00:00 EUVD-2026-137900 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6203 fkie_cve-2007-6203 2026-10-03T22:40:44.745781+00:00

Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.

 https://cve.radiocsirt.org/vuln/ghsa-g7xr-j224-9v5w GHSA-g7xr-j224-9v5w 2026-10-03T22:40:44.745811+00:00

Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.

 https://cve.radiocsirt.org/vuln/gsd-2007-6203 gsd-2007-6203 2026-10-03T22:40:44.745828+00:00 gsd-2007-6203