https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:26:35 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2006-5752 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2006-5752 https://cve.radiocsirt.org/vuln/certa-2007-avi-339 certa-2007-avi-339 https://cve.radiocsirt.org/vuln/certa-2007-avi-339 https://cve.radiocsirt.org/vuln/euvd-2026-143873 EUVD-2026-143873 https://cve.radiocsirt.org/vuln/euvd-2026-143873 https://cve.radiocsirt.org/vuln/fkie_cve-2006-5752 <p>Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform &#34;charset detection&#34; when the content-type is not specified.</p> <p>Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform &#34;charset detection&#34; when the content-type is not specified.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2006-5752 https://cve.radiocsirt.org/vuln/ghsa-jp93-qpwr-857r <p>Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform &#34;charset detection&#34; when the content-type is not specified.</p> <p>Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform &#34;charset detection&#34; when the content-type is not specified.</p> https://cve.radiocsirt.org/vuln/ghsa-jp93-qpwr-857r https://cve.radiocsirt.org/vuln/gsd-2006-5752 gsd-2006-5752 https://cve.radiocsirt.org/vuln/gsd-2006-5752 https://cve.radiocsirt.org/vuln/jvndb-2007-000773 <p>When Hitachi Web Server receives a request that contains malicious scripts, they are inserted into the server-satus page the Server automatically creates. This allows the inserted malicious scripts to be executed on the client machines. The vulnerability does not affect the product if the server-status reporting feature is disabled.</p> <p>When Hitachi Web Server receives a request that contains malicious scripts, they are inserted into the server-satus page the Server automatically creates. This allows the inserted malicious scripts to be executed on the client machines. The vulnerability does not affect the product if the server-status reporting feature is disabled.</p> https://cve.radiocsirt.org/vuln/jvndb-2007-000773 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10623-1 <p>apache2-2.4.49-1.1 on GA media</p> <p>apache2-2.4.49-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10623-1 https://cve.radiocsirt.org/vuln/rhsa-2007:0532 <p>httpd mod_status XSS httpd scoreboard lack of PID protection</p> <p>httpd mod_status XSS httpd scoreboard lack of PID protection</p> https://cve.radiocsirt.org/vuln/rhsa-2007:0532