Lucene search
+L

14755 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2021/10/05 8:27 p.m.•15 views

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server shipped by IBM WebSphere Application Server Patterns

Summary IBM HTTP Server is shipped as a component of IBM WebSphere Application Server Patterns. Information about security vulnerabilities affecting IBM HTTP Server have been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...

0.8AI score
SaveExploits0Affected Software1
GithubExploit
GithubExploit
•added 2021/10/05 5:30 p.m.•473 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 PoC Proof of concept to check if hosts are vul...

7.5CVSS7.7AI score0.99992EPSS
SaveExploits180
GithubExploit
GithubExploit
•added 2021/10/05 5:29 p.m.•266 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Proof of Concept Quick and dirty proof of conce...

7.5CVSS8.1AI score0.99992EPSS
SaveExploits180
GithubExploit
GithubExploit
•added 2021/10/05 4:18 p.m.•154 views

Exploit for Path Traversal in Apache Http_Server

It is an exploit module for Apache Log4j. The target product/ser...

7.5CVSS8.1AI score0.99992EPSS
SaveExploits180
GithubExploit
GithubExploit
•added 2021/10/05 4:13 p.m.•467 views

Exploit for Path Traversal in Apache Http_Server

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in...

7.5CVSS8.2AI score0.99992EPSS
SaveExploits180
The Hacker News
The Hacker News
•added 2021/10/05 2:53 p.m.•119 views

Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!

Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild. "A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could...

7.5CVSS7.6AI score0.99992EPSS
SaveExploits180
osv_cve
osv_cve
•added 2021/10/05 9:15 a.m.•117 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS0.8AI score0.99992EPSS
SaveExploits180References30
osv_debian
osv_debian
•added 2021/10/05 9:15 a.m.•19 views

DEBIAN-CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits180References1
NVD
NVD
•added 2021/10/05 9:15 a.m.•64 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS0.99992EPSS
SaveExploits180References30
Prion
Prion
•added 2021/10/05 9:15 a.m.•90 views

Path traversal

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

4.3CVSS7.9AI score0.99992EPSS
SaveExploits209References29Affected Software3
Vulnrichment
Vulnrichment
•added 2021/10/05 8:40 a.m.•33 views

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

8.1AI score0.99992EPSS
SaveExploits180References29
Cvelist
Cvelist
•added 2021/10/05 8:40 a.m.•238 views

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

8.1AI score0.99992EPSS
SaveExploits180References29
Mend
Mend
•added 2021/10/05 8:40 a.m.•5 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS0.99992EPSS
SaveExploits180References39
CVE
CVE
•added 2021/10/05 8:40 a.m.•3672 views

CVE-2021-41773

CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49 affecting how path normalization maps URLs to files under Alias-like directives. The issue could allow access to files outside configured directories; if CGI scripts are enabled for those paths, remote code execution is...

9.8CVSS8.1AI score0.99992EPSS
SaveIn wildExploits180References30Affected Software1
AlpineLinux
AlpineLinux
•added 2021/10/05 8:40 a.m.•106 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits180
Cvelist
Cvelist
•added 2021/10/05 8:40 a.m.•54 views

CVE-2021-41524 null pointer dereference in h2 fuzzing

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.6AI score0.2517EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2021/10/05 12:00 a.m.•318 views

Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is 2.4.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.50 advisory. - While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external...

9.8CVSS7.2AI score0.99992EPSS
SaveExploits180References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/05 12:00 a.m.•12 views

CVE-2021-41773: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits180References3
attackerkb
attackerkb
•added 2021/10/05 12:00 a.m.•170 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS8AI score0.99992EPSS
SaveIn wildExploits209References39
Tenable Nessus
Tenable Nessus
•added 2021/10/05 12:00 a.m.•510 views

Apache HTTP Server 2.4.49 Path Traversal (CVE-2021-41773)

Binary data apache2449pathtraversal.nbin...

7.5CVSS7.9AI score0.99992EPSS
SaveExploits180References2
Rows per page
Query Builder