CVE-2024-41594

DrayTek Vigor310 devices up to version 4.3.2.6 are affected by CVE-2024-41594 due to the httpd server seeding the OpenSSL PRNG with a static string. This enables an information-disclosure vector (and related MITM risk) via the Vigor310 management UI. Connected sources provide concrete details: af...

RHSA-2019:4126 Red Hat Security Advisory: httpd24-httpd security, bug fix, and enhancement update

Bulletin has no description...

Apache HTTPD: Multiple Vulnerabilities

Background The Apache HTTP server is one of the most popular web servers on the Internet. Description Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

GLSA-202409-31 : Apache HTTPD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-31 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

RHSA-2024:4197 Red Hat Security Advisory: httpd:2.4/httpd security update

Bulletin has no description...

RHSA-2024:7101 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:6583 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:6467 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:6468 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:6136 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:5832 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:5812 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:6584 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:5193 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:5138 Red Hat Security Advisory: httpd security update

Bulletin has no description...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

Important: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

httpd: HTTP response splitting

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2024-2473)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.CVE-2023-38709 HTT...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-2473)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...