147632 matches found
CLEANSTART-2026-VL60700 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards req...
Security vulnerability affects the apache2 package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to...
CLEANSTART-2026-JK21157 Apache HTTP Server 2
Security vulnerability affects the apache2 package. Apache HTTP Server 2...
CLEANSTART-2026-QG85837 Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server
Security vulnerability affects the apache2 package. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server...
CLEANSTART-2026-IE55797 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards req...
Security vulnerability affects the apache2 package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to...
CLEANSTART-2026-XE02231 Some mod_proxy configurations on Apache HTTP Server versions 2
Security vulnerability affects the apache2 package. Some modproxy configurations on Apache HTTP Server versions 2...
CLEANSTART-2026-UI43314 When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately
Security vulnerability affects the apache2 package. When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources were not reclaimed immediately...
CLEANSTART-2026-BD98589 partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2...
CLEANSTART-2026-PP94302 HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack
Security vulnerability affects the apache2 package. HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack...
CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests
Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...
CLEANSTART-2026-EM71520 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses
Security vulnerability affects the apache2 package. Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses...
CLEANSTART-2026-IB07435 Vulnerability in core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. Vulnerability in core of Apache HTTP Server 2...
CLEANSTART-2026-OB27244 Encoding problem in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Encoding problem in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-QV20553 SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2
Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2...
CLEANSTART-2026-RW47407 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Substitution encoding issue in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-WF86343 Potential SSRF in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Potential SSRF in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-OA48166 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance
Security vulnerability affects the apache2 package. Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...
CLEANSTART-2026-CF08389 regression in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A regression in the core of Apache HTTP Server 2...
CLEANSTART-2026-JH66547 Improper escaping of output in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Improper escaping of output in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-DF56906 HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response
Security vulnerability affects the apache2 package. HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response...