https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:57:34 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2012-0883 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2012-0883 https://cve.radiocsirt.org/vuln/certa-2012-avi-222 certa-2012-avi-222 https://cve.radiocsirt.org/vuln/certa-2012-avi-222 https://cve.radiocsirt.org/vuln/euvd-2026-110055 EUVD-2026-110055 https://cve.radiocsirt.org/vuln/euvd-2026-110055 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0883 <p>envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.</p> <p>envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-0883 https://cve.radiocsirt.org/vuln/ghsa-gmh7-j6pc-xmxr <p>envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.</p> <p>envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.</p> https://cve.radiocsirt.org/vuln/ghsa-gmh7-j6pc-xmxr https://cve.radiocsirt.org/vuln/gsd-2012-0883 gsd-2012-0883 https://cve.radiocsirt.org/vuln/gsd-2012-0883 https://cve.radiocsirt.org/vuln/msrc_cve-2012-0883 msrc_CVE-2012-0883 https://cve.radiocsirt.org/vuln/msrc_cve-2012-0883 https://cve.radiocsirt.org/vuln/rhsa-2012:1594 <p>httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled httpd: insecure handling of LD_LIBRARY_PATH in envvars apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass</p> <p>httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled httpd: insecure handling of LD_LIBRARY_PATH in envvars apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1594