https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:42:25 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2016-4979 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2016-4979 https://cve.radiocsirt.org/vuln/cnvd-2016-04600 cnvd-2016-04600 https://cve.radiocsirt.org/vuln/cnvd-2016-04600 https://cve.radiocsirt.org/vuln/euvd-2026-84850 EUVD-2026-84850 https://cve.radiocsirt.org/vuln/euvd-2026-84850 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4979 <p>The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the &#34;SSLVerifyClient require&#34; directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.</p> <p>The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the &#34;SSLVerifyClient require&#34; directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4979 https://cve.radiocsirt.org/vuln/ghsa-r48c-7gpg-9q4x <p>The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the &#34;SSLVerifyClient require&#34; directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.</p> <p>The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the &#34;SSLVerifyClient require&#34; directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.</p> https://cve.radiocsirt.org/vuln/ghsa-r48c-7gpg-9q4x https://cve.radiocsirt.org/vuln/gsd-2016-4979 gsd-2016-4979 https://cve.radiocsirt.org/vuln/gsd-2016-4979 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 <p>apache2-2.4.23-4.1 on GA media</p> <p>apache2-2.4.23-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1420 <p>httpd: X509 client certificate authentication bypass using HTTP/2 HTTPD: sets environmental variable based on user supplied Proxy request header</p> <p>httpd: X509 client certificate authentication bypass using HTTP/2 HTTPD: sets environmental variable based on user supplied Proxy request header</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1420