https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:29:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-10927 bdu:2015-10927 https://cve.radiocsirt.org/vuln/bdu:2015-10927 https://cve.radiocsirt.org/vuln/bell-cve-2015-0253 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-0253 https://cve.radiocsirt.org/vuln/certfr-2015-avi-355 certfr-2015-avi-355 https://cve.radiocsirt.org/vuln/certfr-2015-avi-355 https://cve.radiocsirt.org/vuln/cnvd-2015-04942 cnvd-2015-04942 https://cve.radiocsirt.org/vuln/cnvd-2015-04942 https://cve.radiocsirt.org/vuln/euvd-2026-89221 EUVD-2026-89221 https://cve.radiocsirt.org/vuln/euvd-2026-89221 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0253 <p>The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.</p> <p>The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0253 https://cve.radiocsirt.org/vuln/ghsa-4g3x-jprw-h46m <p>The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.</p> <p>The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.</p> https://cve.radiocsirt.org/vuln/ghsa-4g3x-jprw-h46m https://cve.radiocsirt.org/vuln/gsd-2015-0253 gsd-2015-0253 https://cve.radiocsirt.org/vuln/gsd-2015-0253 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 <p>apache2-2.4.23-4.1 on GA media</p> <p>apache2-2.4.23-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 https://cve.radiocsirt.org/vuln/rhsa-2015:1666 <p>httpd: Possible mod_lua crash due to websocket bug httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path httpd: HTTP request smuggling attack against chunked request parser httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4</p> <p>httpd: Possible mod_lua crash due to websocket bug httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path httpd: HTTP request smuggling attack against chunked request parser httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1666