Lucene search
K

5861 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.40 views

Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2024-38474) affects Power HMC.

Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-38474 DESCRIPTION: Apache HTTP Server could allow a remote attacker to execute arbitrary code on the system, caused by a substitution...

9.8CVSS7.5AI score0.01022EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.33 views

Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to bypass security restrictions CVE-2024-38473

Summary Apache HTTP Server is used by the IBM Datapower Operations Dashboard implementation of network operations Vulnerability Details CVEID:CVE-2024-38473 DESCRIPTION: Apache HTTP Server could allow a remote attacker to bypass security restrictions, caused by an encoding flaw in modproxy. By...

8.1CVSS6.7AI score0.88537EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.30 views

Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2024-39573) affects Power HMC.

Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-39573 DESCRIPTION: Apache HTTP Server is vulnerable to server-side request forgery, caused by a flaw in the modrewrite. By sending a...

7.5CVSS6.2AI score0.02584EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.42 views

Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to obtain sensitive information CVE-2024-38476

Summary Apache HTTP Server is used by the IBM Datapower Operations Dashboard implementation of network operations Vulnerability Details CVEID:CVE-2024-38476 DESCRIPTION: Apache HTTP Server allow a remote attacker to obtain sensitive information, caused by improper input validation by the backend...

9.8CVSS6.4AI score0.04554EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.31 views

Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to server-side request forgery CVE-2024-39573

Summary Apache HTTP Server is used by the IBM Datapower Operations Dashboard implementation of network operations Vulnerability Details CVEID:CVE-2024-39573 DESCRIPTION: Apache HTTP Server is vulnerable to server-side request forgery, caused by a flaw in the modrewrite. By sending a specially...

7.5CVSS6.2AI score0.02584EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.32 views

Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to execute arbitrary code on the system CVE-2024-38474

Summary Apache HTTP Server is used by the IBM Datapower Operations Dashboard implementation of their networking implementation Vulnerability Details CVEID:CVE-2024-38474 DESCRIPTION: Apache HTTP Server could allow a remote attacker to execute arbitrary code on the system, caused by a substitution...

9.8CVSS7.5AI score0.01022EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/01/21 12:0 a.m.44 views

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2025-1122)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

9.8CVSS8.2AI score0.93858EPSS
Exploits4References6
Redos
Redos
added 2025/01/17 12:0 a.m.22 views

ROS-20250117-03

Vulnerability in modproxy module of Apache HTTP Server is related to incorrect writing of null pointer. pointer. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service using a specially crafted request Apache HTTP Server WebSocket protocol...

7.5CVSS9.1AI score0.01924EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:0 a.m.32 views

EulerOS 2.0 SP9 : httpd (EulerOS-SA-2025-1039)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

6.2CVSS7.1AI score0.25097EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:0 a.m.29 views

EulerOS 2.0 SP9 : httpd (EulerOS-SA-2025-1056)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

6.2CVSS7.1AI score0.25097EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2025/01/14 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2025-1006)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.25097EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2025/01/14 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2025-1039)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.7AI score0.25097EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2025/01/13 12:0 a.m.28 views

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2025-1006)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

6.2CVSS7.1AI score0.25097EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2025/01/13 12:0 a.m.25 views

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2025-1023)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

6.2CVSS7.1AI score0.25097EPSS
Exploits3References2
GithubExploit
GithubExploit
added 2025/01/11 2:39 a.m.203 views

Exploit for Path Traversal in Mitel Micollab

CVE-2024-41713 Scanner This repository contains a Python scri...

9.1CVSS9.7AI score0.93912EPSS
Exploits3
GithubExploit
GithubExploit
added 2025/01/03 8:13 p.m.221 views

Exploit for Path Traversal in Apache Http_Server

masscve-2021-41773 MASS CVE-2021-41773 Screenshot...

7.5CVSS8.4AI score0.94391EPSS
Exploits145
GithubExploit
GithubExploit
added 2024/12/18 3:9 p.m.1141 views

Exploit for Exposure of Resource to Wrong Sphere in Apache Http_Server

HTTP Request Smuggling Detection Tool This repository contain...

9.1CVSS6.3AI score0.25097EPSS
Exploits5
IBM Security Bulletins
IBM Security Bulletins
added 2024/12/14 12:45 p.m.26 views

Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-38709) affects Power HMC.

Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-38709 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by improper input validation in the...

7.3CVSS6.5AI score0.04358EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/12/14 12:3 p.m.52 views

Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-45802) affects Power HMC.

Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-45802 DESCRIPTION: When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources...

5.9CVSS7.2AI score0.02793EPSS
Exploits1Affected Software1
OpenVAS
OpenVAS
added 2024/12/12 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-2952)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7AI score0.25097EPSS
Exploits3References2
Rows per page
Query Builder