https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:50:12 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-355 certfr-2015-avi-355 https://cve.radiocsirt.org/vuln/certfr-2015-avi-355 https://cve.radiocsirt.org/vuln/cnvd-2015-00001 cnvd-2015-00001 https://cve.radiocsirt.org/vuln/cnvd-2015-00001 https://cve.radiocsirt.org/vuln/euvd-2026-102955 EUVD-2026-102955 https://cve.radiocsirt.org/vuln/euvd-2026-102955 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8109 <p>mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.</p> <p>mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-8109 https://cve.radiocsirt.org/vuln/ghsa-5m8h-wgcr-7x2w <p>mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.</p> <p>mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.</p> https://cve.radiocsirt.org/vuln/ghsa-5m8h-wgcr-7x2w https://cve.radiocsirt.org/vuln/gsd-2014-8109 gsd-2014-8109 https://cve.radiocsirt.org/vuln/gsd-2014-8109 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 <p>apache2-2.4.23-4.1 on GA media</p> <p>apache2-2.4.23-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 https://cve.radiocsirt.org/vuln/suse-su-2015:0974-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0974-1