https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:12:59.844332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-00270 bdu:2022-00270 2026-10-03T08:12:59.856871+00:00 bdu:2022-00270 https://cve.radiocsirt.org/vuln/bell-cve-2019-17567 Withdrawn: BELL-CVE-2019-17567 — CVE-2019-17567 does not affect BellSoft software 2026-10-03T08:12:59.856911+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-0575 certfr-2024-avi-0575 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-03T08:12:59.856930+00:00 certfr-2024-avi-0575 https://cve.radiocsirt.org/vuln/cnvd-2021-44766 cnvd-2021-44766 2026-10-03T08:12:59.856946+00:00 cnvd-2021-44766 https://cve.radiocsirt.org/vuln/euvd-2026-58415 EUVD-2026-58415 2026-10-03T08:12:59.856957+00:00 EUVD-2026-58415 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17567 fkie_cve-2019-17567 2026-10-03T08:12:59.856968+00:00

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

 https://cve.radiocsirt.org/vuln/ghsa-qf63-wqjv-7x2f GHSA-qf63-wqjv-7x2f 2026-10-03T08:12:59.856994+00:00

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

 https://cve.radiocsirt.org/vuln/gsd-2019-17567 gsd-2019-17567 2026-10-03T08:12:59.857009+00:00 gsd-2019-17567 https://cve.radiocsirt.org/vuln/msrc_cve-2019-17567 msrc_CVE-2019-17567 — mod_proxy_wstunnel tunneling of non Upgraded connections 2026-10-03T08:12:59.857019+00:00 msrc_CVE-2019-17567 https://cve.radiocsirt.org/vuln/oesa-2023-1222 OESA-2023-1222 — httpd security update 2026-10-03T08:12:59.857033+00:00

Affected: openEuler:20.03-LTS-SP3: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es): Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.(CVE-2019-17567)

 https://cve.radiocsirt.org/vuln/rhsa-2021:4613 RHSA-2021:4613 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP10 security update 2026-10-03T08:12:59.857054+00:00

httpd: mod_proxy_wstunnel tunneling of non Upgraded connection pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 httpd: mod_proxy NULL pointer dereference pcre: Integer overflow when parsing callout numeric arguments httpd: Single zero byte stack overflow in mod_auth_digest JBCS: URL normalization issue with dot-dot-semicolon(s) leads to information disclosure openssl: Read buffer overruns processing ASN.1 strings openssl: integer overflow in CipherUpdate openssl: NULL pointer dereference in X509_issuer_and_serial_hash() httpd: mod_session: NULL pointer dereference when parsing Cookie header httpd: mod_session: Heap overflow via a crafted SessionHeader value httpd: Unexpected URL matching with 'MergeSlashes OFF' httpd: NULL pointer dereference via malformed requests

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-17567 UBUNTU-CVE-2019-17567 2026-10-03T08:12:59.857090+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0438 WID-SEC-W-2022-0438 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-03T08:12:59.857112+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.