https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:57:34.990985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2012-0883 Withdrawn: BELL-CVE-2012-0883 — CVE-2012-0883 does not affect BellSoft software 2026-10-02T20:57:34.996929+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certa-2012-avi-222 certa-2012-avi-222 — Une vulnérabilité a été corrigée dans <span class="textit">Apache</span>. La vulnérabilité affecte <span class="textit"… 2026-10-02T20:57:34.996965+00:00 certa-2012-avi-222 https://cve.radiocsirt.org/vuln/euvd-2026-110055 EUVD-2026-110055 2026-10-02T20:57:34.996984+00:00 EUVD-2026-110055 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0883 fkie_cve-2012-0883 2026-10-02T20:57:34.996996+00:00

envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.

 https://cve.radiocsirt.org/vuln/ghsa-gmh7-j6pc-xmxr GHSA-gmh7-j6pc-xmxr 2026-10-02T20:57:34.997021+00:00

envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.

 https://cve.radiocsirt.org/vuln/gsd-2012-0883 gsd-2012-0883 2026-10-02T20:57:34.997036+00:00 gsd-2012-0883 https://cve.radiocsirt.org/vuln/msrc_cve-2012-0883 msrc_CVE-2012-0883 — envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_… 2026-10-02T20:57:34.997046+00:00 msrc_CVE-2012-0883 https://cve.radiocsirt.org/vuln/rhsa-2012:1594 RHSA-2012:1594 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update 2026-10-02T20:57:34.997061+00:00

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled httpd: insecure handling of LD_LIBRARY_PATH in envvars apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass