https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:30:26.539496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1809 ALSA-2021:1809 — Moderate: httpd:2.4 security, bug fix, and enhancement update 2026-10-03T22:30:26.833873+00:00

Affected: AlmaLinux:8: mod_http2, AlmaLinux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)

* httpd: mod_proxy_uwsgi buffer overflow (CVE-2020-11984)

* httpd: mod_http2 concurrent pool usage (CVE-2020-11993)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-00779 bdu:2021-00779 2026-10-03T22:30:26.833950+00:00 bdu:2021-00779 https://cve.radiocsirt.org/vuln/bell-cve-2020-11993 Withdrawn: BELL-CVE-2020-11993 — CVE-2020-11993 does not affect BellSoft software 2026-10-03T22:30:26.833968+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-apache-2020-11993 BIT-apache-2020-11993 2026-10-03T22:30:26.833985+00:00

Affected: Bitnami: apache

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-490 certfr-2020-avi-490 — De multiples vulnérabilités ont été découvertes dans Apache Server. Elles permettent à un attaquant de provoquer un dén… 2026-10-03T22:30:26.834007+00:00 certfr-2020-avi-490 https://cve.radiocsirt.org/vuln/cnvd-2020-46279 cnvd-2020-46279 2026-10-03T22:30:26.834023+00:00 cnvd-2020-46279 https://cve.radiocsirt.org/vuln/euvd-2026-40990 EUVD-2026-40990 2026-10-03T22:30:26.834035+00:00 EUVD-2026-40990 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11993 fkie_cve-2020-11993 2026-10-03T22:30:26.834046+00:00

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.

 https://cve.radiocsirt.org/vuln/ghsa-89mq-r3q6-9q3q GHSA-89mq-r3q6-9q3q 2026-10-03T22:30:26.834068+00:00

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.

 https://cve.radiocsirt.org/vuln/gsd-2020-11993 gsd-2020-11993 2026-10-03T22:30:26.834083+00:00 gsd-2020-11993 https://cve.radiocsirt.org/vuln/msrc_cve-2020-11993 msrc_CVE-2020-11993 — Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic… 2026-10-03T22:30:26.834093+00:00 msrc_CVE-2020-11993 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1285-1 openSUSE-SU-2020:1285-1 — Security update for apache2 2026-10-03T22:30:26.834110+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/rhba-2020:5280 RHBA-2020:5280 — Red Hat Bug Fix Advisory: httpd24 bug fix and enhancement update 2026-10-03T22:30:26.834127+00:00

httpd: mod_proxy_uwsgi buffer overflow httpd: mod_http2 concurrent pool usage

 https://cve.radiocsirt.org/vuln/suse-su-2020:2311-1 SUSE-SU-2020:2311-1 — Security update for apache2 2026-10-03T22:30:26.834143+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11993 UBUNTU-CVE-2020-11993 2026-10-03T22:30:26.834159+00:00

Affected: Ubuntu:18.04:LTS: apache2, Ubuntu:20.04:LTS: apache2

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0063 WID-SEC-W-2023-0063 — Juniper Junos Space: Mehrere Schwachstellen 2026-10-03T22:30:26.834179+00:00

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.