https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:53:22.230481+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05766 bdu:2020-05766 2026-10-03T01:53:22.365402+00:00 bdu:2020-05766 https://cve.radiocsirt.org/vuln/euvd-2026-55400 EUVD-2026-55400 2026-10-03T01:53:22.365442+00:00 EUVD-2026-55400 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13038 fkie_cve-2019-13038 2026-10-03T01:53:22.365457+00:00

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

 https://cve.radiocsirt.org/vuln/ghsa-67h8-fxm4-vr72 GHSA-67h8-fxm4-vr72 2026-10-03T01:53:22.365486+00:00

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

 https://cve.radiocsirt.org/vuln/gsd-2019-13038 gsd-2019-13038 2026-10-03T01:53:22.365502+00:00 gsd-2019-13038 https://cve.radiocsirt.org/vuln/rhsa-2020:1003 RHSA-2020:1003 — Red Hat Security Advisory: mod_auth_mellon security and bug fix update 2026-10-03T01:53:22.365513+00:00

mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13038 UBUNTU-CVE-2019-13038 2026-10-03T01:53:22.365531+00:00

Affected: Ubuntu:16.04:LTS: libapache2-mod-auth-mellon, Ubuntu:18.04:LTS: libapache2-mod-auth-mellon, Ubuntu:20.04:LTS: libapache2-mod-auth-mellon

mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548 WID-SEC-W-2025-2548 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T01:53:22.365555+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.