https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:54:22.321825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2016-4975 Withdrawn: BELL-CVE-2016-4975 — CVE-2016-4975 does not affect BellSoft software 2026-10-02T20:54:22.344614+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2018-15542 cnvd-2018-15542 2026-10-02T20:54:22.344655+00:00 cnvd-2018-15542 https://cve.radiocsirt.org/vuln/euvd-2026-170536 EUVD-2026-170536 2026-10-02T20:54:22.344670+00:00 EUVD-2026-170536 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4975 fkie_cve-2016-4975 2026-10-02T20:54:22.344682+00:00

Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).

 https://cve.radiocsirt.org/vuln/ghsa-crcg-r773-w4rv GHSA-crcg-r773-w4rv 2026-10-02T20:54:22.344711+00:00

Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).

 https://cve.radiocsirt.org/vuln/gsd-2016-4975 gsd-2016-4975 2026-10-02T20:54:22.344728+00:00 gsd-2016-4975 https://cve.radiocsirt.org/vuln/jvndb-2016-008607 jvndb-2016-008607 2026-10-02T20:54:22.344739+00:00

A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.

 https://cve.radiocsirt.org/vuln/rhsa-2017:0906 RHSA-2017:0906 — Red Hat Security Advisory: httpd security and bug fix update 2026-10-02T20:54:22.344754+00:00

httpd: Padding Oracle in Apache mod_session_crypto httpd: DoS vulnerability in mod_auth_digest httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir httpd: Apache HTTP Request Parsing Whitespace Defects

 https://cve.radiocsirt.org/vuln/rhsa-2018:2185 RHSA-2018:2185 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update 2026-10-02T20:54:22.344775+00:00

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir openssl: Insufficient TLS session ticket HMAC length checks openssl: certificate message OOB reads openssl: Carry propagating bug in Montgomery multiplication openssl: Truncated packet could crash via OOB read openssl: BN_mod_exp may produce incorrect results on x86_64 openssl: bn_sqrx8x_internal carry bug on x86_64 openssl: Read/write after SSL object in error state openssl: rsaz_1024_mul_avx2 overflow bug on x86_64

 https://cve.radiocsirt.org/vuln/suse-su-2018:2554-1 SUSE-SU-2018:2554-1 — Security update for apache2 2026-10-02T20:54:22.344802+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4975 UBUNTU-CVE-2016-4975 2026-10-02T20:54:22.344816+00:00

Affected: Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2

Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).