Lucene search
+L

6027 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.28 views

Linux Distros Unpatched Vulnerability : CVE-2018-1312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated...

9.8CVSS6.5AI score0.15885EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.22 views

Linux Distros Unpatched Vulnerability : CVE-2017-15715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end o...

8.1CVSS6.5AI score0.8572EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/17 8:15 p.m.14 views

CLSA-2025-1739823342 httpd: Fix of CVE-2022-30522

CVE-2022-30522: fix possible DoS...

7.5CVSS7.1AI score0.89885EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 12:43 p.m.16 views

CVE-2023-38035

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration...

9.8CVSS7.2AI score0.99954EPSS
SaveExploits6References4
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.13 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-36387)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36387 advisory. - Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference,...

5.4CVSS6.9AI score0.01715EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.27 views

Azure Linux 3.0 Security Update: httpd (CVE-2023-38709)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38709 advisory. - Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to...

7.3CVSS7.5AI score0.03914EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.28 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-40898)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40898 advisory. - SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTM...

9.1CVSS6.9AI score0.01536EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.26 views

Azure Linux 3.0 Security Update: httpd / mod_http2 (CVE-2024-27316)

The version of httpd / modhttp2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27316 advisory. - HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to genera...

7.5CVSS7.5AI score0.91327EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.13 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-24795)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24795 advisory. - HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject maliciou...

6.3CVSS6.8AI score0.02874EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.13 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-39884)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39884 advisory. - A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based...

6.2CVSS7.1AI score0.00889EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.28 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-38472)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38472 advisory. - SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF a...

7.5CVSS6.9AI score0.6947EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.21 views

Azure Linux 3.0 Security Update: httpd (CVE-2024-40725)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40725 advisory. - A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy...

6.2CVSS7AI score0.04168EPSS
SaveExploits4References2
RedhatCVE
RedhatCVE
added 2025/02/06 1:43 a.m.17 views

CVE-2022-43636

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6211111 3.20.1US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by...

8.8CVSS6.7AI score0.00905EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2025/02/05 10:13 p.m.12 views

CVE-2012-0883 affecting package httpd for versions less than 2.4.2-1

CVE-2012-0883 affecting package httpd for versions less than 2.4.2-1. A patched version of the package is available...

6.9CVSS6.3AI score0.00946EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/02/05 1:12 p.m.25 views

CVE-2020-35785

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365...

8.8CVSS7.2AI score0.00659EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:08 p.m.105 views

Security Bulletin: Vulnerability in httpd (CVE-2024-27316) affects Power HMC

Summary HTTPD is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-27316 DESCRIPTION: Apache HTTP Server is vulnerable to a denial of service, caused by the failure to check or limit the use of HTTP/2 CONTINUATION frames that...

7.5CVSS6.9AI score0.91327EPSS
SaveExploits2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.31 views

PT-2025-3986 · Apache · Apache Httpd

Name of the Vulnerable Software and Affected Versions: Apache HTTPD affected versions not specified Description: The issue concerns a rejected reason related to the Apache HTTPD DNS. No further details are provided about the nature of the issue or its potential impact. There is no information...

7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/21 12:00 a.m.49 views

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2025-1122)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

9.8CVSS8.2AI score0.99957EPSS
SaveExploits5References6
OpenVAS
OpenVAS
added 2025/01/21 12:00 a.m.32 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2025-1122)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.99957EPSS
SaveExploits5References4
OpenVAS
OpenVAS
added 2025/01/14 12:00 a.m.20 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2025-1006)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.04168EPSS
SaveExploits4References2
Rows per page
Query Builder