https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:46:10.666816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2012-2687 Withdrawn: BELL-CVE-2012-2687 — CVE-2012-2687 does not affect BellSoft software 2026-10-03T02:46:10.815383+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certa-2012-avi-460 certa-2012-avi-460 — Deux vulnérabilités ont été corrigées dans Apache Web Server. Leur exploitation réussie pouvant permettre l'accès illég… 2026-10-03T02:46:10.815427+00:00 certa-2012-avi-460 https://cve.radiocsirt.org/vuln/euvd-2026-111238 EUVD-2026-111238 2026-10-03T02:46:10.815446+00:00 EUVD-2026-111238 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2687 fkie_cve-2012-2687 2026-10-03T02:46:10.815458+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.

 https://cve.radiocsirt.org/vuln/ghsa-8v5x-5rvv-5j4v GHSA-8v5x-5rvv-5j4v 2026-10-03T02:46:10.815488+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.

 https://cve.radiocsirt.org/vuln/gsd-2012-2687 gsd-2012-2687 2026-10-03T02:46:10.815505+00:00 gsd-2012-2687 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 openSUSE-SU-2024:10268-1 — apache2-2.4.23-4.1 on GA media 2026-10-03T02:46:10.815517+00:00

apache2-2.4.23-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2012:1591 RHSA-2012:1591 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update 2026-10-03T02:46:10.815558+00:00

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass