https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:49:44.355825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-05887 bdu:2015-05887 2026-10-02T23:49:44.680161+00:00 bdu:2015-05887 https://cve.radiocsirt.org/vuln/euvd-2026-98332 EUVD-2026-98332 2026-10-02T23:49:44.680210+00:00 EUVD-2026-98332 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2324 fkie_cve-2014-2324 2026-10-02T23:49:44.680234+00:00

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

 https://cve.radiocsirt.org/vuln/ghsa-mvq4-g5jc-x2wr GHSA-mvq4-g5jc-x2wr 2026-10-02T23:49:44.680279+00:00

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

 https://cve.radiocsirt.org/vuln/gsd-2014-2324 gsd-2014-2324 2026-10-02T23:49:44.680306+00:00 gsd-2014-2324 https://cve.radiocsirt.org/vuln/jvndb-2021-000016 jvndb-2021-000016 2026-10-02T23:49:44.680325+00:00

SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. *Exposure of information through directory listing (CWE-548) - CVE-2021-20656 *Improper access control (CWE-284) - CVE-2021-20657 *OS command injection (CWE-78) - CVE-2021-20658 *Unrestricted upload of file with dangerous type (CWE-434) - CVE-2021-20659 *Cross-site scripting (CWE-79) - CVE-2021-20660 *Directory traversal (CWE-23) - CVE-2021-20661 *Missing authentication for critical function (CWE-306) - CVE-2021-20662 *Using components with known vulnerabilities (CWE-1035) - CVE-2011-0762, CVE-2011-4362, CVE-2013-4508, CVE-2013-4559, CVE-2013-4560, CVE-2014-2323, CVE-2014-2324 The product uses previous versions of vsfpd and lighttpd with known vulnerabilities. CVE-2021-20656 Kouichirou Okada, Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20657, CVE-2021-20658 Takayuki Sasak, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20659, CVE-2021-20660, CVE-2021-20661, CVE-2021-20662 Kouichirou Okada, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10402-1 openSUSE-SU-2024:10402-1 — lighttpd-1.4.37-1.6 on GA media 2026-10-02T23:49:44.680373+00:00

lighttpd-1.4.37-1.6 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-2324 UBUNTU-CVE-2014-2324 2026-10-02T23:49:44.680407+00:00

Affected: Ubuntu:14.04:LTS: lighttpd

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.