<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 14:04:06 +0000</lastBuildDate>
    <item>
      <title>bdu:2021-04904</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2021-04904</link>
      <description>bdu:2021-04904</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2021-04904</guid>
    </item>
    <item>
      <title>Withdrawn: BELL-CVE-2021-42013 — CVE-2021-42013 does not affect BellSoft software</title>
      <link>https://cve.radiocsirt.org/vuln/bell-cve-2021-42013</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bell-cve-2021-42013</guid>
    </item>
    <item>
      <title>BIT-apache-2021-42013 — Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)</title>
      <link>https://cve.radiocsirt.org/vuln/bit-apache-2021-42013</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: apache&lt;/p&gt;
&lt;p&gt;It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration &amp;#34;require all denied&amp;#34;, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: apache&lt;/p&gt;
&lt;p&gt;It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration &amp;#34;require all denied&amp;#34;, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bit-apache-2021-42013</guid>
    </item>
    <item>
      <title>certfr-2021-avi-764 — Une vulnérabilité a été découverte dans Apache HTTP Server. Elle permet
à un attaquant de provoquer une exécution de co…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2021-avi-764</link>
      <description>certfr-2021-avi-764</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2021-avi-764</guid>
    </item>
    <item>
      <title>EUVD-2026-255922</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-255922</link>
      <description>EUVD-2026-255922</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-255922</guid>
    </item>
    <item>
      <title>fkie_cve-2021-42013</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2021-42013</link>
      <description>&lt;p&gt;It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration &amp;#34;require all denied&amp;#34;, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration &amp;#34;require all denied&amp;#34;, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2021-42013</guid>
    </item>
    <item>
      <title>GHSA-m24x-wx9p-jqmh</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-m24x-wx9p-jqmh</link>
      <description>&lt;p&gt;It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration &amp;#34;require all denied&amp;#34;, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration &amp;#34;require all denied&amp;#34;, these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-m24x-wx9p-jqmh</guid>
    </item>
    <item>
      <title>gsd-2021-42013</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2021-42013</link>
      <description>gsd-2021-42013</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2021-42013</guid>
    </item>
    <item>
      <title>jvndb-2021-000090</title>
      <link>https://cve.radiocsirt.org/vuln/jvndb-2021-000090</link>
      <description>&lt;p&gt;Apache HTTP Server provided by The Apache Software Foundation contains a directory traversal vulnerability (CWE-22).&#13;
&#13;
Shungo Kumasaka of Internet Initiative Japan Inc. reported this vulnerability to the developer, and also to IPA in order to notify users of its solution through JVN.&#13;
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Apache HTTP Server provided by The Apache Software Foundation contains a directory traversal vulnerability (CWE-22).&#13;
&#13;
Shungo Kumasaka of Internet Initiative Japan Inc. reported this vulnerability to the developer, and also to IPA in order to notify users of its solution through JVN.&#13;
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/jvndb-2021-000090</guid>
    </item>
    <item>
      <title>openSUSE-SU-2024:11560-1 — apache2-2.4.51-1.1 on GA media</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2024:11560-1</link>
      <description>&lt;p&gt;apache2-2.4.51-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;apache2-2.4.51-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2024:11560-1</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-1591 — Juniper JUNOS: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1591</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service  zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service  zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1591</guid>
    </item>
  </channel>
</rss>
