7045 matches found
apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_escape_path_segment_buffer
Detailed Report: https://oss-fuzz.com/testcase?key=4906072245665792 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60700000022c Crash State: apescapepathsegmentbuffer...
apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_escape_quotes
Detailed Report: https://oss-fuzz.com/testcase?key=5629746242256896 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x604000152a36 Crash State: apescapequotes fuzzutils.c...
AZL-6481 CVE-2021-32791 affecting package httpd for versions less than 2.4.52-1
modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...
AZL-6482 CVE-2021-32792 affecting package httpd for versions less than 2.4.52-1
modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...
Medium: httpd24
Issue Overview: A flaw was found in Apache httpd. The modproxywstunnel module tunnels non-upgraded connections. CVE-2019-17567 A flaw was found in HTTPd. In some Apache HTTP Server versions, unprivileged local users can stop HTTPd on Windows. The highest threat from this vulnerability is to syste...
CVE-2020-13950 affecting package httpd 2.4.46-6
CVE-2020-13950 affecting package httpd 2.4.46-6. A patched version of the package is available...
CVE-2020-11993 affecting package httpd 2.4.43-
CVE-2020-11993 affecting package httpd 2.4.43-. An upgraded version of the package is available that resolves this issue...
CVE-2020-11984 affecting package httpd 2.4.43-
CVE-2020-11984 affecting package httpd 2.4.43-. An upgraded version of the package is available that resolves this issue...
CVE-2021-26690 affecting package httpd 2.4.46-6
CVE-2021-26690 affecting package httpd 2.4.46-6. A patched version of the package is available...
CVE-2021-30641 affecting package httpd 2.4.46-6
CVE-2021-30641 affecting package httpd 2.4.46-6. A patched version of the package is available...
CVE-2020-35452 affecting package httpd 2.4.46-6
CVE-2020-35452 affecting package httpd 2.4.46-6. A patched version of the package is available...
CVE-2021-26691 affecting package httpd 2.4.46-6
CVE-2021-26691 affecting package httpd 2.4.46-6. A patched version of the package is available...
F5 Networks BIG-IP : Apache HTTPD vulnerability (K25126370)
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. CVE-2019-10098 Impact An attacker can abuse this vulnerability in a phishing...
F5 Networks BIG-IP : Apache HTTPD vulnerability (K23153696)
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL. CVE-2020-1927 Impact An attacker can abuse this vulnerability in a phishin...
Netgear DGN2200v1 远程命令执行
Exploit Title: Netgear DGN2200v1 - Remote Command Execution RCE Unauthenticated Date: 02.07.2021 Exploit Author: SivertPL Vendor Homepage: https://www.netgear.com/ Version: All prior to v1.0.0.60 !/usr/bin/python """ NETGEAR DGN2200v1 Unauthenticated Remote Command Execution Author: SivertPL...
Photon OS 1.0: Httpd PHSA-2021-1.0-0409
An update of the httpd package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0409. The text itself is copyright C VMware, Inc...
Netgear DGN2200v1 - Remote Command Execution (Unauthenticated) Exploit
Exploit Title: Netgear DGN2200v1 - Remote Command Execution RCE Unauthenticated Exploit Author: SivertPL Vendor Homepage: https://www.netgear.com/ Version: All prior to v1.0.0.60 !/usr/bin/python """ NETGEAR DGN2200v1 Unauthenticated Remote Command Execution Author: SivertPL email protected Date:...
Medium: httpd
Issue Overview: A flaw was found in Apache httpd. The modproxywstunnel module tunnels non-upgraded connections. CVE-2019-17567 A flaw was found in HTTPd. In some Apache HTTP Server versions, unprivileged local users can stop HTTPd on Windows. The highest threat from this vulnerability is to syste...
Photon OS 2.0: Httpd PHSA-2021-2.0-0365
An update of the httpd package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0365. The text itself is copyright C VMware, Inc...
