https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:18:51.966494+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-391 certa-2013-avi-391 — De multiples vulnérabilités ont été corrigées dans le noyau Linux de <span class="textit">Ubuntu</span>. Certaines d'en… 2026-10-03T02:18:52.078899+00:00 certa-2013-avi-391 https://cve.radiocsirt.org/vuln/euvd-2026-107612 EUVD-2026-107612 2026-10-03T02:18:52.078956+00:00 EUVD-2026-107612 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4508 fkie_cve-2013-4508 2026-10-03T02:18:52.078972+00:00

lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.

 https://cve.radiocsirt.org/vuln/ghsa-vfqw-83ww-jr3v GHSA-vfqw-83ww-jr3v 2026-10-03T02:18:52.079006+00:00

lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.

 https://cve.radiocsirt.org/vuln/gsd-2013-4508 gsd-2013-4508 2026-10-03T02:18:52.079033+00:00 gsd-2013-4508 https://cve.radiocsirt.org/vuln/jvndb-2021-000016 jvndb-2021-000016 2026-10-03T02:18:52.079046+00:00

SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. *Exposure of information through directory listing (CWE-548) - CVE-2021-20656 *Improper access control (CWE-284) - CVE-2021-20657 *OS command injection (CWE-78) - CVE-2021-20658 *Unrestricted upload of file with dangerous type (CWE-434) - CVE-2021-20659 *Cross-site scripting (CWE-79) - CVE-2021-20660 *Directory traversal (CWE-23) - CVE-2021-20661 *Missing authentication for critical function (CWE-306) - CVE-2021-20662 *Using components with known vulnerabilities (CWE-1035) - CVE-2011-0762, CVE-2011-4362, CVE-2013-4508, CVE-2013-4559, CVE-2013-4560, CVE-2014-2323, CVE-2014-2324 The product uses previous versions of vsfpd and lighttpd with known vulnerabilities. CVE-2021-20656 Kouichirou Okada, Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20657, CVE-2021-20658 Takayuki Sasak, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20659, CVE-2021-20660, CVE-2021-20661, CVE-2021-20662 Kouichirou Okada, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10402-1 openSUSE-SU-2024:10402-1 — lighttpd-1.4.37-1.6 on GA media 2026-10-03T02:18:52.079078+00:00

lighttpd-1.4.37-1.6 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4508 Withdrawn: UBUNTU-CVE-2013-4508 2026-10-03T02:18:52.079112+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: lighttpd

lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the network.