https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:23:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-01806 bdu:2017-01806 https://cve.radiocsirt.org/vuln/bdu:2017-01806 https://cve.radiocsirt.org/vuln/bell-cve-2016-0736 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2016-0736 https://cve.radiocsirt.org/vuln/certfr-2017-avi-092 certfr-2017-avi-092 https://cve.radiocsirt.org/vuln/certfr-2017-avi-092 https://cve.radiocsirt.org/vuln/cnvd-2016-13231 cnvd-2016-13231 https://cve.radiocsirt.org/vuln/cnvd-2016-13231 https://cve.radiocsirt.org/vuln/euvd-2026-166763 EUVD-2026-166763 https://cve.radiocsirt.org/vuln/euvd-2026-166763 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0736 <p>In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.</p> <p>In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0736 https://cve.radiocsirt.org/vuln/ghsa-mxm5-vg5c-rx7v <p>In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.</p> <p>In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.</p> https://cve.radiocsirt.org/vuln/ghsa-mxm5-vg5c-rx7v https://cve.radiocsirt.org/vuln/gsd-2016-0736 gsd-2016-0736 https://cve.radiocsirt.org/vuln/gsd-2016-0736 https://cve.radiocsirt.org/vuln/rhsa-2017:0906 <p>httpd: Padding Oracle in Apache mod_session_crypto httpd: DoS vulnerability in mod_auth_digest httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir httpd: Apache HTTP Request Parsing Whitespace Defects</p> <p>httpd: Padding Oracle in Apache mod_session_crypto httpd: DoS vulnerability in mod_auth_digest httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir httpd: Apache HTTP Request Parsing Whitespace Defects</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0906 https://cve.radiocsirt.org/vuln/rhsa-2017:1161 <p>httpd: Padding Oracle in Apache mod_session_crypto httpd: mod_http2 denial-of-service by thread starvation httpd: DoS vulnerability in mod_auth_digest httpd: Incomplete handling of LimitRequestFields directive in mod_http2 httpd: Apache HTTP Request Parsing Whitespace Defects httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite</p> <p>httpd: Padding Oracle in Apache mod_session_crypto httpd: mod_http2 denial-of-service by thread starvation httpd: DoS vulnerability in mod_auth_digest httpd: Incomplete handling of LimitRequestFields directive in mod_http2 httpd: Apache HTTP Request Parsing Whitespace Defects httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1161 https://cve.radiocsirt.org/vuln/suse-su-2017:0797-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2017:0797-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0736 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0736 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370