https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:39:06.748591+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-02714 cnvd-2017-02714 2026-10-03T15:39:06.844133+00:00 cnvd-2017-02714 https://cve.radiocsirt.org/vuln/euvd-2026-73914 EUVD-2026-73914 2026-10-03T15:39:06.844169+00:00 EUVD-2026-73914 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6413 fkie_cve-2017-6413 2026-10-03T15:39:06.844185+00:00

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.

 https://cve.radiocsirt.org/vuln/ghsa-9r74-cmm5-qv85 GHSA-9r74-cmm5-qv85 2026-10-03T15:39:06.844217+00:00

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.

 https://cve.radiocsirt.org/vuln/gsd-2017-6413 gsd-2017-6413 2026-10-03T15:39:06.844235+00:00 gsd-2017-6413 https://cve.radiocsirt.org/vuln/rhsa-2019:2112 RHSA-2019:2112 — Red Hat Security Advisory: mod_auth_openidc security update 2026-10-03T15:39:06.844246+00:00

mod_auth_openidc: Shows user-supplied content on error pages mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an "AuthType oauth20" configuration

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-6413 UBUNTU-CVE-2017-6413 2026-10-03T15:39:06.844267+00:00

Affected: Ubuntu:16.04:LTS: libapache2-mod-auth-openidc

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP traffic.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517 WID-SEC-W-2022-0517 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T15:39:06.844287+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.