Lucene search
K

5773 matches found

GithubExploit
GithubExploit
added 2021/10/07 12:14 a.m.29 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Playground === This is a small Docker recipe for...

7.5CVSS8.9AI score0.99992EPSS
Exploits145
GithubExploit
GithubExploit
added 2021/10/07 12:14 a.m.11 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Playground === This is a small Docker recipe for...

7.5CVSS9.8AI score0.99992EPSS
Exploits145
ATTACKERKB
ATTACKERKB
added 2021/10/07 12:0 a.m.107 views

Apache HTTPd 2.4.49/2.4.50 路径穿越漏洞

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS9.3AI score0.99992EPSS
In wildExploits169References33
Tenable Nessus
Tenable Nessus
added 2021/10/07 12:0 a.m.49 views

Photon OS 3.0: Httpd PHSA-2021-3.0-0305

An update of the httpd package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0305. The text itself is copyright C VMware, Inc...

7.5CVSS7.4AI score0.46179EPSS
Exploits1References2
Slackware Linux
Slackware Linux
added 2021/10/06 1:14 a.m.92 views

[slackware-security] httpd

New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/httpd-2.4.50-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. Fixed null pointer...

9.8CVSS0.4AI score0.99992EPSS
Exploits145
Tenable Nessus
Tenable Nessus
added 2021/10/06 12:0 a.m.66 views

FreeBSD : Apache httpd -- Multiple vulnerabilities (25b78bdd-25b8-11ec-a341-d4c9ef517024)

The Apache http server project reports : - moderate: NULL pointer dereference in h2 fuzzing CVE-2021-41524 - important: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

9.8CVSS8.2AI score0.99992EPSS
Exploits145References4
GithubExploit
GithubExploit
added 2021/10/05 6:56 p.m.13 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Apache httpd only 2.4.49 For educational pur...

7.5CVSS7.1AI score0.99992EPSS
Exploits145
GithubExploit
GithubExploit
added 2021/10/05 4:45 p.m.13 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Path traversal in Apache HTTP Server 2.4.49 CV...

7.5CVSS7.1AI score0.99992EPSS
Exploits145
OSV
OSV
added 2021/10/05 9:15 a.m.1 views

DEBIAN-CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.5CVSS7.8AI score0.24982EPSS
Exploits0References1
OSV
OSV
added 2021/10/05 9:15 a.m.1 views

ALPINE-CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.5CVSS6.8AI score0.24982EPSS
Exploits0References1
OSV
OSV
added 2021/10/05 9:15 a.m.43 views

CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.5CVSS2.4AI score
Exploits0References8
UbuntuCve
UbuntuCve
added 2021/10/05 9:15 a.m.44 views

CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.5CVSS7.3AI score0.24982EPSS
Exploits0References5
Prion
Prion
added 2021/10/05 9:15 a.m.42 views

Null pointer dereference

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

5CVSS7.3AI score0.24982EPSS
Exploits0References8Affected Software3
CVE
CVE
added 2021/10/05 8:40 a.m.645 views

CVE-2021-41524

CVE-2021-41524 affects Apache HTTP Server (httpd) 2.4.49, where a null pointer dereference during HTTP/2 request processing can allow external sources to cause a DoS. The flaw was introduced with 2.4.49; no public exploit is shown in the documents. Check Point’s November 2021 advisory maps this C...

7.5CVSS7.4AI score0.24982EPSS
Exploits0References8Affected Software1
Apache Httpd
Apache Httpd
added 2021/10/04 12:0 a.m.87 views

Apache Httpd < 2.4.50 : null pointer dereference in h2 fuzzing

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

7.5CVSS2.1AI score0.24982EPSS
Exploits0Affected Software1
Photon
Photon
added 2021/10/02 12:0 a.m.54 views

Critical Photon OS Security Update - PHSA-2021-3.0-0309

Updates of 'vim', 'httpd' packages of Photon OS have been released...

9CVSS6.8AI score0.99999EPSS
Exploits5
OpenVAS
OpenVAS
added 2021/10/02 12:0 a.m.38 views

Fedora: Security Advisory for httpd (FEDORA-2021-e3f6dd670d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8AI score0.99999EPSS
Exploits5References4
Photon
Photon
added 2021/10/01 12:0 a.m.66 views

Critical Photon OS Security Update - PHSA-2021-0309

Updates of 'vim', 'httpd' packages of Photon OS have been released...

6.8CVSS1.6AI score0.99999EPSS
Exploits6
Photon
Photon
added 2021/10/01 12:0 a.m.56 views

Critical Photon OS Security Update - PHSA-2021-0437

Updates of 'atftp', 'httpd' packages of Photon OS have been released...

9CVSS9.4AI score0.99999EPSS
Exploits5
NVD
NVD
added 2021/09/30 9:15 p.m.13 views

CVE-2020-20746

A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60EN allows remote attackers to execute arbitrary code or cause a denial of service DoS via a crafted POST request to /goform/SetStaticRouteCfg...

7.2CVSS0.02808EPSS
Exploits1References2
Rows per page
Query Builder