https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:08:13.502617+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0891 ALSA-2022:0891 — Moderate: httpd:2.4 security update 2026-10-04T13:08:13.809304+00:00

Affected: AlmaLinux:8: httpd, AlmaLinux:8: httpd-devel, AlmaLinux:8: httpd-filesystem, AlmaLinux:8: httpd-manual, AlmaLinux:8: httpd-tools, AlmaLinux:8: mod_ldap, AlmaLinux:8: mod_md, AlmaLinux:8: mod_proxy_html, AlmaLinux:8: mod_session, AlmaLinux:8: mod_ssl

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)

* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-00203 bdu:2022-00203 2026-10-04T13:08:13.809444+00:00 bdu:2022-00203 https://cve.radiocsirt.org/vuln/bell-cve-2021-39275 Withdrawn: BELL-CVE-2021-39275 — CVE-2021-39275 does not affect BellSoft software 2026-10-04T13:08:13.809471+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-apache-2021-39275 BIT-apache-2021-39275 — ap_escape_quotes buffer overflow 2026-10-04T13:08:13.809496+00:00

Affected: Bitnami: apache

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-713 certfr-2021-avi-713 — De multiples vulnérabilités ont été découvertes dans Apache httpd. Elles permettent à un attaquant de provoquer un prob… 2026-10-04T13:08:13.809532+00:00 certfr-2021-avi-713 https://cve.radiocsirt.org/vuln/cnvd-2022-03225 cnvd-2022-03225 2026-10-04T13:08:13.809559+00:00 cnvd-2022-03225 https://cve.radiocsirt.org/vuln/euvd-2026-30568 EUVD-2026-30568 2026-10-04T13:08:13.809582+00:00 EUVD-2026-30568 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39275 fkie_cve-2021-39275 2026-10-04T13:08:13.809602+00:00

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/ghsa-p59c-pqfv-4fwc GHSA-p59c-pqfv-4fwc 2026-10-04T13:08:13.809640+00:00

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/gsd-2021-39275 gsd-2021-39275 2026-10-04T13:08:13.809672+00:00 gsd-2021-39275 https://cve.radiocsirt.org/vuln/icsa-22-167-06 ICSA-22-167-06 — Siemens Apache HTTP Server 2026-10-04T13:08:13.809704+00:00

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier. A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/msrc_cve-2021-39275 msrc_CVE-2021-39275 — ap_escape_quotes buffer overflow 2026-10-04T13:08:13.809745+00:00 msrc_CVE-2021-39275 https://cve.radiocsirt.org/vuln/oesa-2021-1387 OESA-2021-1387 — httpd security update 2026-10-04T13:08:13.809786+00:00

Affected: openEuler:20.03-LTS-SP1: httpd, openEuler:20.03-LTS-SP2: httpd

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fix(es): ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.(CVE-2021-39275)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1438-1 openSUSE-SU-2021:1438-1 — Security update for apache2 2026-10-04T13:08:13.809827+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/rhsa-2022:6753 RHSA-2022:6753 — Red Hat Security Advisory: httpd24-httpd security and bug fix update 2026-10-04T13:08:13.809860+00:00

httpd: Request splitting via HTTP/2 method injection and mod_proxy httpd: NULL pointer dereference via malformed requests httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path httpd: Out-of-bounds write in ap_escape_quotes() via malicious input httpd: possible NULL dereference or SSRF in forward proxy configurations httpd: mod_lua: Use of uninitialized value of in r:parsebody httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody httpd: mod_sed: Read/write beyond bounds httpd: mod_proxy_ajp: Possible request smuggling httpd: Out-of-bounds read via ap_rwrite() httpd: Out-of-bounds read in ap_strcmp_match() httpd: mod_lua: DoS in r:parsebody httpd: mod_sed: DoS vulnerability httpd: mod_lua: Information disclosure with websockets httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism

 https://cve.radiocsirt.org/vuln/suse-su-2021:14811-1 SUSE-SU-2021:14811-1 — Security update for apache2 2026-10-04T13:08:13.809935+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39275 UBUNTU-CVE-2021-39275 2026-10-04T13:08:13.809963+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:18.04:LTS: apache2, Ubuntu:20.04:LTS: apache2

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0724 WID-SEC-W-2022-0724 — Apache HTTP Server: Mehrere Schwachstellen 2026-10-04T13:08:13.810009+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.