1039 matches found
PT-2026-2100
Name of the Vulnerable Software and Affected Versions Openclaw BlueBubbles affected versions not specified Apache HTTP Server affected versions not specified Description An authentication bypass exists due to loopback trust. The issue involves a cross-site request forgery. Recommendations At the...
RHEL 7 : httpd (RHSA-2026:0075)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0075 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Apache HTTP Server: Serve...
PT-2026-1230
CVE-2026-21648 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2026-21648 Published : Jan. 3, 2026, 4:15 a.m. | 3 hours, 20 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-1197
CVE-2025-34214 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2025-34214 Published : Jan. 2, 2026, 5:15 p.m. | 14 minutes ago Description : Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. Severity: 0.0 | NA Visit the link for...
PT-2026-1171
CVE-2025-34122 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2025-34122 Published : Jan. 2, 2026, 5:15 p.m. | 14 minutes ago Description : Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. Severity: 0.0 | NA Visit the link for...
PT-2026-1175
CVE-2025-34145 - Apache HTTP Server Cross-Site Scripting CVE ID : CVE-2025-34145 Published : Jan. 2, 2026, 5:15 p.m. | 14 minutes ago Description : Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. Severity: 0.0 | NA Visit the link for...
PT-2026-1146
CVE-2025-22182 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2025-22182 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA...
PT-2025-53426
CVE-2025-68693 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2025-68693 Published : Dec. 24, 2025, 4:15 a.m. | 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2025-53422
CVE-2025-68689 - Apache Apache HTTP Server Remote Code Execution CVE ID : CVE-2025-68689 Published : Dec. 24, 2025, 4:15 a.m. | 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
httpd:2.4 security update
httpd 2.4.37-65.0.1.7 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-65.7 - Resolves: RHEL-135054 - httpd: Apache HTTP Server: moduserdir+suexec bypass via AllowOverride FileInfo CVE-2025-66200 - Resolves: RHEL-135039 - httpd: Apache HTTP Server: CGI environment variable...
httpd security update
An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...
AlmaLinux 10 : httpd (ALSA-2025:23932)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23932 advisory. httpd: Apache HTTP Server: CGI environment variable override CVE-2025-65082 httpd: Apache HTTP Server: moduserdir+suexec bypass via AllowOverride FileIn...
Oracle Linux 9 : httpd (ELSA-2025-23919)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23919 advisory. - Resolves: RHEL-135063 - httpd: Apache HTTP Server: moduserdir+suexec bypass via AllowOverride FileInfo CVE-2025-66200 - Resolves: RHEL-135048 - http...
PT-2025-52589
CVE-2025-68484 - Apache HTTP Server Authentication Bypass CVE ID : CVE-2025-68484 Published : Dec. 19, 2025, 4:16 a.m. | 2 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SUSE-SU-2025:4488-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed modmd ACME unintended retry intervals bsc1254511 - CVE-2025-65082: Fixed CGI environment variable override bsc1254514 - CVE-2025-58098: Fixed Server Side Includes adding query string to exec cmd=... bsc1254512 -...
[SECURITY] Fedora 43 Update: httpd-2.4.66-1.fc43
The Apache HTTP Server is a powerful, efficient, and extensible web server...
Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
...
PT-2025-51126
CVE-2025-67694 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-67694 Published : Dec. 11, 2025, 4:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...
PT-2025-51119
CVE-2025-67687 - Apache Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-67687 Published : Dec. 11, 2025, 4:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...
