https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:57:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-04408 bdu:2019-04408 https://cve.radiocsirt.org/vuln/bdu:2019-04408 https://cve.radiocsirt.org/vuln/bell-cve-2019-0217 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-0217 https://cve.radiocsirt.org/vuln/certfr-2019-avi-141 certfr-2019-avi-141 https://cve.radiocsirt.org/vuln/certfr-2019-avi-141 https://cve.radiocsirt.org/vuln/cnvd-2019-08945 cnvd-2019-08945 https://cve.radiocsirt.org/vuln/cnvd-2019-08945 https://cve.radiocsirt.org/vuln/euvd-2026-48388 EUVD-2026-48388 https://cve.radiocsirt.org/vuln/euvd-2026-48388 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0217 <p>In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.</p> <p>In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-0217 https://cve.radiocsirt.org/vuln/ghsa-q29r-xr2f-g7j5 <p>In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.</p> <p>In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.</p> https://cve.radiocsirt.org/vuln/ghsa-q29r-xr2f-g7j5 https://cve.radiocsirt.org/vuln/gsd-2019-0217 gsd-2019-0217 https://cve.radiocsirt.org/vuln/gsd-2019-0217 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1209-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1209-1 https://cve.radiocsirt.org/vuln/rhsa-2019:3932 <p>openssl: timing side channel attack in the DSA signature algorithm openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) httpd: mod_http2: DoS via slow, unneeded request bodies httpd: mod_session_cookie does not respect expiry time httpd: mod_http2: read-after-free on a string compare httpd: mod_http2: possible crash on late upgrade httpd: mod_auth_digest: access control bypass due to race condition HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: 0-length headers lead to denial of service HTTP/2: request for large response leads to denial of service</p> <p>openssl: timing side channel attack in the DSA signature algorithm openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) httpd: mod_http2: DoS via slow, unneeded request bodies httpd: mod_session_cookie does not respect expiry time httpd: mod_http2: read-after-free on a string compare httpd: mod_http2: possible crash on late upgrade httpd: mod_auth_digest: access control bypass due to race condition HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: 0-length headers lead to denial of service HTTP/2: request for large response leads to denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2019:3932 https://cve.radiocsirt.org/vuln/suse-su-2019:0873-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2019:0873-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0217 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2, Ubuntu:18.04:LTS: apache2</p> <p>In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2, Ubuntu:18.04:LTS: apache2</p> <p>In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0217 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2047 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Apache HTTP Server ausnutzen, um seine Rechte zu erweitern, Sicherheitsrestriktionen zu umgehen oder um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen im Apache HTTP Server ausnutzen, um seine Rechte zu erweitern, Sicherheitsrestriktionen zu umgehen oder um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2047