https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:34:49 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1248 certfr-2026-avi-1248 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1248 https://vulnerability.circl.lu/vuln/fkie_cve-2026-73636 <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-73636 https://vulnerability.circl.lu/vuln/ghsa-x3h4-7828-fv9v <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p>Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via crafted requests that trigger garbage collection of the client&#39;s shared memory entry when AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://vulnerability.circl.lu/vuln/ghsa-x3h4-7828-fv9v https://vulnerability.circl.lu/vuln/rhsa-2026:74858 <p>httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs</p> <p>httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs</p> https://vulnerability.circl.lu/vuln/rhsa-2026:74858