https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:03:26.957249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0258 ALSA-2022:0258 — Important: httpd:2.4 security update 2026-10-04T05:03:27.365495+00:00

Affected: AlmaLinux:8: httpd, AlmaLinux:8: httpd-devel, AlmaLinux:8: httpd-filesystem, AlmaLinux:8: httpd-manual, AlmaLinux:8: httpd-tools, AlmaLinux:8: mod_http2, AlmaLinux:8: mod_ldap, AlmaLinux:8: mod_md, AlmaLinux:8: mod_proxy_html, AlmaLinux:8: mod_session and 1 more

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-06392 bdu:2021-06392 2026-10-04T05:03:27.365608+00:00 bdu:2021-06392 https://cve.radiocsirt.org/vuln/bell-cve-2021-44790 Withdrawn: BELL-CVE-2021-44790 — CVE-2021-44790 does not affect BellSoft software 2026-10-04T05:03:27.365639+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-apache-2021-44790 BIT-apache-2021-44790 — Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier 2026-10-04T05:03:27.365671+00:00

Affected: Bitnami: apache

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-972 certfr-2021-avi-972 — De multiples vulnérabilités ont été découvertes dans Apache httpd. Elles permettent à un attaquant de provoquer un déni… 2026-10-04T05:03:27.365714+00:00 certfr-2021-avi-972 https://cve.radiocsirt.org/vuln/cnvd-2021-102386 cnvd-2021-102386 2026-10-04T05:03:27.365741+00:00 cnvd-2021-102386 https://cve.radiocsirt.org/vuln/euvd-2026-33149 EUVD-2026-33149 2026-10-04T05:03:27.365761+00:00 EUVD-2026-33149 https://cve.radiocsirt.org/vuln/fkie_cve-2021-44790 fkie_cve-2021-44790 2026-10-04T05:03:27.365784+00:00

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

 https://cve.radiocsirt.org/vuln/ghsa-c547-2659-q37g GHSA-c547-2659-q37g 2026-10-04T05:03:27.365824+00:00

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

 https://cve.radiocsirt.org/vuln/gsd-2021-44790 gsd-2021-44790 2026-10-04T05:03:27.365852+00:00 gsd-2021-44790 https://cve.radiocsirt.org/vuln/icsa-22-132-02 ICSA-22-132-02 — Mitsubishi Electric MELSOFT iQ AppPortal 2026-10-04T05:03:27.365871+00:00

Apache HTTP Server Versions 2.4.0 to 2.4.46 allow unprivileged local users to stop httpd on Windows.CVE-2020-13938 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). In Apache HTTP Server Versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow.CVE-2021-26691 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server Versions 2.4.48 and earlier.CVE-2021-34798 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). An attacker who can present SM2 content for decryption to an application could cause data to overflow the buffer up to a maximum of 62 bytes, altering the contents of other data held after the buffer or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1 (Affected 1.1.1-1.1.1k). This issue is detailed further in CVE-2021-3711.CVE-2021-3711 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A carefully crafted request body can ca…

 https://cve.radiocsirt.org/vuln/msrc_cve-2021-44790 msrc_CVE-2021-44790 — Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier 2026-10-04T05:03:27.365938+00:00 msrc_CVE-2021-44790 https://cve.radiocsirt.org/vuln/oesa-2021-1473 OESA-2021-1473 — httpd security update 2026-10-04T05:03:27.365967+00:00

Affected: openEuler:20.03-LTS-SP1: httpd, openEuler:20.03-LTS-SP2: httpd

Apache HTTP Server. Security Fix(es): A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).(CVE-2021-44224) A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.(CVE-2021-44790)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0091-1 openSUSE-SU-2022:0091-1 — Security update for apache2 2026-10-04T05:03:27.366018+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/rhsa-2022:0258 RHSA-2022:0258 — Red Hat Security Advisory: httpd:2.4 security update 2026-10-04T05:03:27.366056+00:00

httpd: mod_lua: Possible buffer overflow when parsing multipart content

 https://cve.radiocsirt.org/vuln/suse-su-2022:0065-1 SUSE-SU-2022:0065-1 — Security update for apache2 2026-10-04T05:03:27.366086+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-44790 UBUNTU-CVE-2021-44790 2026-10-04T05:03:27.366119+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:18.04:LTS: apache2, Ubuntu:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-04T05:03:27.366164+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.