https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:35:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04426 bdu:2024-04426 https://cve.radiocsirt.org/vuln/bdu:2024-04426 https://cve.radiocsirt.org/vuln/bit-modsecurity-2022-48279 <p><strong>Affected:</strong> Bitnami: modsecurity</p> <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> <p><strong>Affected:</strong> Bitnami: modsecurity</p> <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> https://cve.radiocsirt.org/vuln/bit-modsecurity-2022-48279 https://cve.radiocsirt.org/vuln/euvd-2026-226974 EUVD-2026-226974 https://cve.radiocsirt.org/vuln/euvd-2026-226974 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48279 <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-48279 https://cve.radiocsirt.org/vuln/ghsa-6fhx-fm6h-hpxq <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> https://cve.radiocsirt.org/vuln/ghsa-6fhx-fm6h-hpxq https://cve.radiocsirt.org/vuln/gsd-2022-48279 gsd-2022-48279 https://cve.radiocsirt.org/vuln/gsd-2022-48279 https://cve.radiocsirt.org/vuln/oesa-2024-1334 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: mod_security</p> <p>This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information. Security Fix(es): In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: mod_security</p> <p>This software is also called Modsec,it is an open-source web application firewall. It is designed for Apache HTTP Server.ModSecurity is commonly deployed to provide protections against generic classed of vulnerabilities.The install of this package is easy and you can read the README.TXT for more information. Security Fix(es): In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.(CVE-2022-48279)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1334 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14703-1 <p>apache2-mod_security2-2.9.8-2.1 on GA media</p> <p>apache2-mod_security2-2.9.8-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14703-1 https://cve.radiocsirt.org/vuln/rhsa-2023:4629 <p>apr: integer overflow/wraparound in apr_encode httpd: mod_proxy_ajp: Possible request smuggling httpd: mod_proxy: HTTP response splitting mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass httpd: mod_proxy_uwsgi HTTP response splitting curl: use after free in SSH sha256 fingerprint check curl: IDN wildcard match may lead to Improper Cerificate Validation curl: more POST-after-PUT confusion</p> <p>apr: integer overflow/wraparound in apr_encode httpd: mod_proxy_ajp: Possible request smuggling httpd: mod_proxy: HTTP response splitting mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass httpd: mod_proxy_uwsgi HTTP response splitting curl: use after free in SSH sha256 fingerprint check curl: IDN wildcard match may lead to Improper Cerificate Validation curl: more POST-after-PUT confusion</p> https://cve.radiocsirt.org/vuln/rhsa-2023:4629 https://cve.radiocsirt.org/vuln/suse-su-2023:0317-1 <p>Security update for apache2-mod_security2</p> <p>Security update for apache2-mod_security2</p> https://cve.radiocsirt.org/vuln/suse-su-2023:0317-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48279 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: modsecurity-apache, Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:Pro:22.04:LTS: modsecurity-apache</p> <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: modsecurity-apache, Ubuntu:Pro:16.04:LTS: modsecurity-apache, Ubuntu:Pro:18.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity-apache, Ubuntu:20.04:LTS: modsecurity, Ubuntu:22.04:LTS: modsecurity, Ubuntu:Pro:22.04:LTS: modsecurity-apache</p> <p>In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48279 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0188 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Trustwave ModSecurity ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Trustwave ModSecurity ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0188