https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:04:22.442418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-05887 bdu:2015-05887 2026-10-02T20:04:22.453756+00:00 bdu:2015-05887 https://cve.radiocsirt.org/vuln/euvd-2026-98354 EUVD-2026-98354 2026-10-02T20:04:22.453794+00:00 EUVD-2026-98354 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2323 fkie_cve-2014-2323 2026-10-02T20:04:22.453810+00:00

SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.

 https://cve.radiocsirt.org/vuln/ghsa-v97w-2rqc-4p78 GHSA-v97w-2rqc-4p78 2026-10-02T20:04:22.453840+00:00

SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.

 https://cve.radiocsirt.org/vuln/gsd-2014-2323 gsd-2014-2323 2026-10-02T20:04:22.453856+00:00 gsd-2014-2323 https://cve.radiocsirt.org/vuln/jvndb-2021-000016 jvndb-2021-000016 2026-10-02T20:04:22.453868+00:00

SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. *Exposure of information through directory listing (CWE-548) - CVE-2021-20656 *Improper access control (CWE-284) - CVE-2021-20657 *OS command injection (CWE-78) - CVE-2021-20658 *Unrestricted upload of file with dangerous type (CWE-434) - CVE-2021-20659 *Cross-site scripting (CWE-79) - CVE-2021-20660 *Directory traversal (CWE-23) - CVE-2021-20661 *Missing authentication for critical function (CWE-306) - CVE-2021-20662 *Using components with known vulnerabilities (CWE-1035) - CVE-2011-0762, CVE-2011-4362, CVE-2013-4508, CVE-2013-4559, CVE-2013-4560, CVE-2014-2323, CVE-2014-2324 The product uses previous versions of vsfpd and lighttpd with known vulnerabilities. CVE-2021-20656 Kouichirou Okada, Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20657, CVE-2021-20658 Takayuki Sasak, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20659, CVE-2021-20660, CVE-2021-20661, CVE-2021-20662 Kouichirou Okada, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10402-1 openSUSE-SU-2024:10402-1 — lighttpd-1.4.37-1.6 on GA media 2026-10-02T20:04:22.453898+00:00

lighttpd-1.4.37-1.6 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-2323 UBUNTU-CVE-2014-2323 2026-10-02T20:04:22.453920+00:00

Affected: Ubuntu:14.04:LTS: lighttpd

SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.