Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:25:06 +0000 bdu:2023-01606 https://cve.radiocsirt.org/vuln/bdu:2023-01606 bdu:2023-01606 https://cve.radiocsirt.org/vuln/bdu:2023-01606 EUVD-2026-218891 https://cve.radiocsirt.org/vuln/euvd-2026-218891 EUVD-2026-218891 https://cve.radiocsirt.org/vuln/euvd-2026-218891 fkie_cve-2023-25802 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25802 <p>Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don&#39;t correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd`, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch for this issue.</p> <p>Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don&#39;t correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd`, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25802 gsd-2023-25802 https://cve.radiocsirt.org/vuln/gsd-2023-25802 gsd-2023-25802 https://cve.radiocsirt.org/vuln/gsd-2023-25802