https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:41:05.847396+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06280 bdu:2024-06280 2026-10-04T00:41:07.353458+00:00 bdu:2024-06280 https://cve.radiocsirt.org/vuln/bell-cve-2024-39884 Withdrawn: BELL-CVE-2024-39884 — CVE-2024-39884 does not affect BellSoft software 2026-10-04T00:41:07.353515+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-apache-2024-39884 BIT-apache-2024-39884 — Apache HTTP Server: source code disclosure with handlers configured via AddType 2026-10-04T00:41:07.353544+00:00

Affected: Bitnami: apache

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.

Users are recommended to upgrade to version 2.4.61, which fixes this issue.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0544 certfr-2024-avi-0544 — Une vulnérabilité a été découverte dans Apache HTTP Server. Elle permet à un attaquant de provoquer une atteinte à la c… 2026-10-04T00:41:07.353594+00:00 certfr-2024-avi-0544 https://cve.radiocsirt.org/vuln/cnvd-2025-16615 cnvd-2025-16615 2026-10-04T00:41:07.353619+00:00 cnvd-2025-16615 https://cve.radiocsirt.org/vuln/euvd-2026-217455 EUVD-2026-217455 2026-10-04T00:41:07.353638+00:00 EUVD-2026-217455 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39884 fkie_cve-2024-39884 2026-10-04T00:41:07.353655+00:00

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.

Users are recommended to upgrade to version 2.4.61, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-5r34-776f-3434 GHSA-5r34-776f-3434 2026-10-04T00:41:07.353691+00:00

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.

Users are recommended to upgrade to version 2.4.61, which fixes this issue.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-39884 msrc_CVE-2024-39884 — Apache HTTP Server: source code disclosure with handlers configured via AddType 2026-10-04T00:41:07.353718+00:00 msrc_CVE-2024-39884 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14116-1 openSUSE-SU-2024:14116-1 — apache2-2.4.61-1.1 on GA media 2026-10-04T00:41:07.353743+00:00

apache2-2.4.61-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:3061-1 SUSE-SU-2024:3061-1 — Security update for apache2 2026-10-04T00:41:07.353773+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39884 UBUNTU-CVE-2024-39884 2026-10-04T00:41:07.353796+00:00

Affected: Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.61, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1520 WID-SEC-W-2024-1520 — Apache HTTP Server: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T00:41:07.353844+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HTTP Server ausnutzen, um Informationen offenzulegen.