https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:40:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-10929 bdu:2015-10929 https://cve.radiocsirt.org/vuln/bdu:2015-10929 https://cve.radiocsirt.org/vuln/bell-cve-2015-3185 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-3185 https://cve.radiocsirt.org/vuln/certfr-2015-avi-355 certfr-2015-avi-355 https://cve.radiocsirt.org/vuln/certfr-2015-avi-355 https://cve.radiocsirt.org/vuln/cnvd-2015-04944 cnvd-2015-04944 https://cve.radiocsirt.org/vuln/cnvd-2015-04944 https://cve.radiocsirt.org/vuln/euvd-2026-91672 EUVD-2026-91672 https://cve.radiocsirt.org/vuln/euvd-2026-91672 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3185 <p>The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.</p> <p>The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3185 https://cve.radiocsirt.org/vuln/ghsa-5fv4-m5x3-j32p <p>The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.</p> <p>The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-5fv4-m5x3-j32p https://cve.radiocsirt.org/vuln/gsd-2015-3185 gsd-2015-3185 https://cve.radiocsirt.org/vuln/gsd-2015-3185 https://cve.radiocsirt.org/vuln/rhsa-2015:1666 <p>httpd: Possible mod_lua crash due to websocket bug httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path httpd: HTTP request smuggling attack against chunked request parser httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4</p> <p>httpd: Possible mod_lua crash due to websocket bug httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path httpd: HTTP request smuggling attack against chunked request parser httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1666 https://cve.radiocsirt.org/vuln/rhsa-2015:1667 <p>httpd: HTTP request smuggling attack against chunked request parser httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4</p> <p>httpd: HTTP request smuggling attack against chunked request parser httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1667 https://cve.radiocsirt.org/vuln/suse-su-2015:1851-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1851-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3185 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2</p> <p>The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2</p> <p>The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3185