https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:29:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01572 bdu:2019-01572 https://cve.radiocsirt.org/vuln/bdu:2019-01572 https://cve.radiocsirt.org/vuln/cnvd-2019-08976 cnvd-2019-08976 https://cve.radiocsirt.org/vuln/cnvd-2019-08976 https://cve.radiocsirt.org/vuln/euvd-2026-49774 EUVD-2026-49774 https://cve.radiocsirt.org/vuln/euvd-2026-49774 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3878 <p>A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.</p> <p>A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3878 https://cve.radiocsirt.org/vuln/ghsa-6gx9-985p-w8c8 <p>A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.</p> <p>A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-6gx9-985p-w8c8 https://cve.radiocsirt.org/vuln/gsd-2019-3878 gsd-2019-3878 https://cve.radiocsirt.org/vuln/gsd-2019-3878 https://cve.radiocsirt.org/vuln/rhsa-2019:0746 <p>httpd: privilege escalation from modules scripts mod_auth_mellon: authentication bypass in ECP flow</p> <p>httpd: privilege escalation from modules scripts mod_auth_mellon: authentication bypass in ECP flow</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0746 https://cve.radiocsirt.org/vuln/rhsa-2019:0766 <p>mod_auth_mellon: open redirect in logout url when using URLs with backslashes mod_auth_mellon: authentication bypass in ECP flow</p> <p>mod_auth_mellon: open redirect in logout url when using URLs with backslashes mod_auth_mellon: authentication bypass in ECP flow</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0766 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3878 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libapache2-mod-auth-mellon, Ubuntu:18.04:LTS: libapache2-mod-auth-mellon, Ubuntu:20.04:LTS: libapache2-mod-auth-mellon</p> <p>A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libapache2-mod-auth-mellon, Ubuntu:18.04:LTS: libapache2-mod-auth-mellon, Ubuntu:20.04:LTS: libapache2-mod-auth-mellon</p> <p>A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3878