Lucene search
+L

3261 matches found

OpenVAS
OpenVAS
added 2024/04/05 12:0 a.m.39 views

Slackware: Security Advisory (SSA:2024-095-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.91327EPSS
SaveExploits2References6
NVD
NVD
added 2024/04/04 8:15 p.m.46 views

CVE-2023-38709

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

7.3CVSS5.7AI score0.03914EPSS
SaveExploits0References11
NVD
NVD
added 2024/04/04 8:15 p.m.37 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS5.6AI score0.02874EPSS
SaveExploits0References10
OSV
OSV
added 2024/04/04 8:15 p.m.9 views

AZL-39997 CVE-2024-24795 affecting package httpd for versions less than 2.4.61-1

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.6AI score0.02874EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/04 8:15 p.m.1 views

DEBIAN-CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6AI score0.02874EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/04 8:15 p.m.2 views

ALPINE-CVE-2023-38709

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

7.3CVSS7AI score0.03914EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/04 8:15 p.m.7 views

AZL-40040 CVE-2024-24795 affecting package httpd for versions less than 2.4.59-1

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.6AI score0.02874EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/04 8:15 p.m.4 views

ALPINE-CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS7AI score0.02874EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/04 8:15 p.m.2 views

DEBIAN-CVE-2023-38709

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

7.3CVSS7AI score0.03914EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/04/04 8:15 p.m.76 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.6AI score0.02874EPSS
SaveExploits0References8
OSV
OSV
added 2024/04/04 8:15 p.m.5 views

UBUNTU-CVE-2023-38709

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

7.3CVSS6.9AI score0.03914EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2024/04/04 7:32 p.m.109 views

CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting. Mitigation Mitigation for this issue is either not available or t...

6.8CVSS7.1AI score0.03914EPSS
SaveExploits0References4
CVE
CVE
added 2024/04/04 7:20 p.m.3891 views

CVE-2024-24795

CVE-2024-24795 (httpd) describes HTTP response splitting in multiple Apache HTTP Server modules when malicious response headers can be injected into backend applications, enabling HTTP desynchronization. The vulnerability is mitigated by upgrading to Apache HTTP Server 2.4.59, as indicated across...

6.3CVSS7AI score0.02874EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2024/04/04 7:20 p.m.120 views

CVE-2024-24795 Apache HTTP Server: HTTP Response Splitting in multiple modules

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

7.5AI score0.02874EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/04/04 7:20 p.m.58 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6AI score0.02874EPSS
SaveExploits0
OSV
OSV
added 2024/04/04 7:20 p.m.53 views

CVE-2024-24795 Apache HTTP Server: HTTP Response Splitting in multiple modules

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.5AI score0.02874EPSS
SaveExploits0References12
AlpineLinux
AlpineLinux
added 2024/04/04 7:20 p.m.61 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS7.2AI score0.02874EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/04/04 7:19 p.m.124 views

CVE-2023-38709 Apache HTTP Server: HTTP response splitting

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

7.6AI score0.03914EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/04/04 7:19 p.m.61 views

CVE-2023-38709 Apache HTTP Server: HTTP response splitting

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

5.8AI score0.03914EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2024/04/04 7:19 p.m.47 views

CVE-2023-38709

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...

7.3CVSS6.9AI score0.03914EPSS
SaveExploits0
Rows per page
Query Builder