https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 06:33:40 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:9434 <p><strong>Affected:</strong> AlmaLinux:9: mod_proxy_cluster</p> <p>The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.</p> <p>Security Fix(es):</p> <p>* mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: mod_proxy_cluster</p> <p>The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality.</p> <p>Security Fix(es):</p> <p>* mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:9434 https://cve.radiocsirt.org/vuln/euvd-2026-331238 EUVD-2026-331238 https://cve.radiocsirt.org/vuln/euvd-2026-331238 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10306 <p>A vulnerability was found in mod_proxy_cluster. The issue is that the &lt;Directory&gt; directive should be replaced by the &lt;Location&gt; directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.</p> <p>A vulnerability was found in mod_proxy_cluster. The issue is that the &lt;Directory&gt; directive should be replaced by the &lt;Location&gt; directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10306 https://cve.radiocsirt.org/vuln/ghsa-jm2g-3f56-rvvh <p>A vulnerability was found in mod_proxy_cluster. The issue is that the &lt;Directory&gt; directive should be replaced by the &lt;Location&gt; directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.</p> <p>A vulnerability was found in mod_proxy_cluster. The issue is that the &lt;Directory&gt; directive should be replaced by the &lt;Location&gt; directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic.</p> https://cve.radiocsirt.org/vuln/ghsa-jm2g-3f56-rvvh https://cve.radiocsirt.org/vuln/rhba-2025:2973 <p>bugfix update for mod_proxy_cluster</p> <p>bugfix update for mod_proxy_cluster</p> https://cve.radiocsirt.org/vuln/rhba-2025:2973 https://cve.radiocsirt.org/vuln/rhba-2025:5309 <p>mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests</p> <p>mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests</p> https://cve.radiocsirt.org/vuln/rhba-2025:5309 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1378 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Daten zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1378