https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:52:47 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2016-4975 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2016-4975 https://cve.radiocsirt.org/vuln/cnvd-2018-15542 cnvd-2018-15542 https://cve.radiocsirt.org/vuln/cnvd-2018-15542 https://cve.radiocsirt.org/vuln/euvd-2026-170536 EUVD-2026-170536 https://cve.radiocsirt.org/vuln/euvd-2026-170536 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4975 <p>Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the &#34;Location&#34; or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).</p> <p>Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the &#34;Location&#34; or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4975 https://cve.radiocsirt.org/vuln/ghsa-crcg-r773-w4rv <p>Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the &#34;Location&#34; or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).</p> <p>Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the &#34;Location&#34; or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).</p> https://cve.radiocsirt.org/vuln/ghsa-crcg-r773-w4rv https://cve.radiocsirt.org/vuln/gsd-2016-4975 gsd-2016-4975 https://cve.radiocsirt.org/vuln/gsd-2016-4975 https://cve.radiocsirt.org/vuln/jvndb-2016-008607 <p>A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.</p> <p>A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.</p> https://cve.radiocsirt.org/vuln/jvndb-2016-008607 https://cve.radiocsirt.org/vuln/rhsa-2017:0906 <p>httpd: Padding Oracle in Apache mod_session_crypto httpd: DoS vulnerability in mod_auth_digest httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir httpd: Apache HTTP Request Parsing Whitespace Defects</p> <p>httpd: Padding Oracle in Apache mod_session_crypto httpd: DoS vulnerability in mod_auth_digest httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir httpd: Apache HTTP Request Parsing Whitespace Defects</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0906 https://cve.radiocsirt.org/vuln/rhsa-2018:2185 <p>openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir openssl: Insufficient TLS session ticket HMAC length checks openssl: certificate message OOB reads openssl: Carry propagating bug in Montgomery multiplication openssl: Truncated packet could crash via OOB read openssl: BN_mod_exp may produce incorrect results on x86_64 openssl: bn_sqrx8x_internal carry bug on x86_64 openssl: Read/write after SSL object in error state openssl: rsaz_1024_mul_avx2 overflow bug on x86_64</p> <p>openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir openssl: Insufficient TLS session ticket HMAC length checks openssl: certificate message OOB reads openssl: Carry propagating bug in Montgomery multiplication openssl: Truncated packet could crash via OOB read openssl: BN_mod_exp may produce incorrect results on x86_64 openssl: bn_sqrx8x_internal carry bug on x86_64 openssl: Read/write after SSL object in error state openssl: rsaz_1024_mul_avx2 overflow bug on x86_64</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2185 https://cve.radiocsirt.org/vuln/suse-su-2018:2554-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2554-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4975 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the &#34;Location&#34; or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the &#34;Location&#34; or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4975