https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:15 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1248 certfr-2026-avi-1248 https://db.gcve.eu/vuln/certfr-2026-avi-1248 https://db.gcve.eu/vuln/fkie_cve-2026-73637 <p>Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p>Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-73637 https://db.gcve.eu/vuln/ghsa-gr5c-77fq-wx32 <p>Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p>Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.</p> <p>Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://db.gcve.eu/vuln/ghsa-gr5c-77fq-wx32 https://db.gcve.eu/vuln/rhsa-2026:74858 <p>httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs</p> <p>httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs</p> https://db.gcve.eu/vuln/rhsa-2026:74858 https://db.gcve.eu/vuln/ubuntu-cve-2026-73637 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:26.04:LTS: apache2</p> <p>Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apache2, Ubuntu:Pro:16.04:LTS: apache2, Ubuntu:Pro:18.04:LTS: apache2, Ubuntu:Pro:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2, Ubuntu:24.04:LTS: apache2, Ubuntu:26.04:LTS: apache2</p> <p>Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-73637