Apache HTTP Server 2.4.7 - 2.4.65 Authentication Bypass Vulnerability - Windows

Apache HTTP Server is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Advisory ROSA-SA-2025-3082

Software: httpd 2.4.6 OS: rosa-server79 unaffected versions = httpd-2.4.6-99.0.7.res7.1 affected versions httpd-2.4.6-99.0.7.res7.1 CVE-ID: CVE-2024-47252 BDU-ID: 2025-08958 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the modssl function of the Apache HTTP Server web server is related to a failu...

EfficientIP SOLIDserver IPAM 路径遍历漏洞

EfficientIP SOLIDserver IPAM is an integrated IP address management system from EfficientIP France. A path traversal vulnerability exists in EfficientIP SOLIDserver IPAM version 8.2.3, which stems from a directory traversal issue in the parameter directory in...

OpenWRT Privilege Escalation Vulnerability (Mar 2025)

OpenWRT is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openwrt:openwrt";...

Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2025-2440)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TencentOS Server 3: mod_auth_openidc:2.3 (TSSA-2024:0762)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0762 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Updated apache packages fix security vulnerabilities

HTTP response splitting. CVE-2024-42516 SSRF with modheaders setting Content-Type header. CVE-2024-43204 modssl error log variable escaping. CVE-2024-47252 modproxyhttp2 denial of service. CVE-2025-49630 modssl access control bypass with session resumption. CVE-2025-23048 modssl TLS upgrade attac...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990815 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix null pointer dereference in ftraceaddmod The @ftracemod is allocated by kzalloc, so...

Huawei EulerOS: Security Advisory for mod_http2 (EulerOS-SA-2025-2395)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in oktafian-tempe48-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef54d8d9ba4d31fa9b67d9e592e95528b4a051deae2e5f51c74c17c49017e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CLSA-2025-1762421346 mod_security: Fix of CVE-2025-47947

CVE-2025-47947: fix potential DoS by adding ARGS to the sanitize list only if it's not added yet...

EUVD-2025-37060

Malicious code in mod-manager npm...

Malicious code in mod-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec890b586ea0ff47a8ba914ff95c535bdeebbdfaf6788b6357a5afae32c9463 The package mod-manager was found to contain malicious code...

MAL-2025-49233 Malicious code in mod-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec890b586ea0ff47a8ba914ff95c535bdeebbdfaf6788b6357a5afae32c9463 The package mod-manager was found to contain malicious code...

CLSA-2025-1761747106 Fix CVE(s): CVE-2024-38477

SECURITY UPDATE: null pointer dereference in modproxy - debian/patches/CVE-2024-38477.patch: validate hostname in modules/proxy/proxyutil.c. Restart from the original URL on reconnect in modules/http2/modproxyhttp2.c. - CVE-2024-38477...

CVE-2021-42717 affecting package mod_security for versions less than 2.9.7-8

CVE-2021-42717 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...

CVE-2023-24021 affecting package mod_security for versions less than 2.9.7-8

CVE-2023-24021 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2025-54764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd. CVE-2025-54764 Note th...

EulerOS 2.0 SP13 : httpd (EulerOS-SA-2025-2262)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications...