https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:04:56.720032+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-669 certa-2011-avi-669 — Une vulnérabilité dans Lighttpd permet à un utilisateur malveillant de provoquer un déni de service à distance. 2026-10-03T13:04:56.727384+00:00 certa-2011-avi-669 https://cve.radiocsirt.org/vuln/euvd-2026-116817 EUVD-2026-116817 2026-10-03T13:04:56.727437+00:00 EUVD-2026-116817 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4362 fkie_cve-2011-4362 2026-10-03T13:04:56.727462+00:00

Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.

 https://cve.radiocsirt.org/vuln/ghsa-wx9r-x448-8rcp GHSA-wx9r-x448-8rcp 2026-10-03T13:04:56.727507+00:00

Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.

 https://cve.radiocsirt.org/vuln/gsd-2011-4362 gsd-2011-4362 2026-10-03T13:04:56.727535+00:00 gsd-2011-4362 https://cve.radiocsirt.org/vuln/jvndb-2021-000016 jvndb-2021-000016 2026-10-03T13:04:56.727555+00:00

SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. *Exposure of information through directory listing (CWE-548) - CVE-2021-20656 *Improper access control (CWE-284) - CVE-2021-20657 *OS command injection (CWE-78) - CVE-2021-20658 *Unrestricted upload of file with dangerous type (CWE-434) - CVE-2021-20659 *Cross-site scripting (CWE-79) - CVE-2021-20660 *Directory traversal (CWE-23) - CVE-2021-20661 *Missing authentication for critical function (CWE-306) - CVE-2021-20662 *Using components with known vulnerabilities (CWE-1035) - CVE-2011-0762, CVE-2011-4362, CVE-2013-4508, CVE-2013-4559, CVE-2013-4560, CVE-2014-2323, CVE-2014-2324 The product uses previous versions of vsfpd and lighttpd with known vulnerabilities. CVE-2021-20656 Kouichirou Okada, Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20657, CVE-2021-20658 Takayuki Sasak, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20659, CVE-2021-20660, CVE-2021-20661, CVE-2021-20662 Kouichirou Okada, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10402-1 openSUSE-SU-2024:10402-1 — lighttpd-1.4.37-1.6 on GA media 2026-10-03T13:04:56.727606+00:00

lighttpd-1.4.37-1.6 on GA media