Lucene search
+L

6988 matches found

Cvelist
Cvelist
•added 2023/01/17 7:07 p.m.•177 views

CVE-2006-20001 Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

8.4AI score0.03546EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2023/01/17 7:07 p.m.•100 views

CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

7.5CVSS8.6AI score0.03546EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/17 7:07 p.m.•129 views

CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

7.5CVSS7.5AI score0.03546EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2023/01/17 12:00 a.m.•60 views

KLA20167 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in moddav can be exploited to cause denial of...

9CVSS8.3AI score0.01879EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/17 12:00 a.m.•11 views

Apache HTTP Server 注入漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A CLRF injection vulnerability exists in Apache HTTP Server versions prior to 2.4.55. The vulnerability stems from a Web applicati...

5.3CVSS7.1AI score0.55911EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•1 views

CVE-2022-37436: Improper Neutralization of CRLF Sequences in HTTP Headers

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client...

5.3CVSS5.8AI score0.55911EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•1 views

CVE-2022-36760: Inconsistent Interpretation of HTTP Requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions...

9CVSS5.9AI score0.01879EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/17 12:00 a.m.•9 views

Apache HTTP Server 环境问题漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An Http request smuggling vulnerability exists in Apache HTTP Server versions 2.4.0 through 2.4.55 and earlier, which stems from a...

9CVSS6.8AI score0.01879EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•1 views

CVE-2006-20001: Out-of-bounds Write

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

7.5CVSS5.8AI score0.03546EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•73 views

PT-2023-5866

Name of the Vulnerable Software and Affected Versions HTTP/2 protocol affected versions not specified Description A flaw exists in the handling of multiplexed streams within the HTTP/2 protocol. Multiplexing allows multiple requests to be sent over a single TCP connection as parallel streams. A...

7.8CVSS6.8AI score0.99999EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
•added 2023/01/06 12:00 a.m.•49 views

EulerOS Virtualization 3.0.2.6 : httpd (EulerOS-SA-2023-1074)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits11References5
IBM Security Bulletins
IBM Security Bulletins
•added 2022/12/30 5:31 p.m.•69 views

Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring installed WebSphere Application Server

Summary The following security issues have been identified in the WebSphere Application Server included as part of IBM Tivoli Monitoring ITM portal server. Vulnerability Details CVEID:CVE-2021-29736 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to...

8.8CVSS8AI score0.52612EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/12/30 5:31 p.m.•72 views

Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server

Summary The following security issues have been identified in the WebSphere Application Server included as part of IBM Tivoli Monitoring ITM portal server. CVEs: CVE-2021-23450, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-25315, CVE-2022-25313, CVE-2022-25235, CVE-2022-25236,...

9.8CVSS8AI score0.69097EPSS
SaveExploits4Affected Software1
OpenVAS
OpenVAS
•added 2022/12/30 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2931)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.5AI score0.0373EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/12/30 12:00 a.m.•39 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2905)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.5AI score0.0373EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/12/28 12:00 a.m.•38 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2866)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.89529EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2022/12/28 12:00 a.m.•45 views

EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2022-2905)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the modisapi...

5.3CVSS7.2AI score0.0373EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/28 12:00 a.m.•48 views

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2022-2931)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the modisapi...

5.3CVSS7.2AI score0.0373EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/27 12:00 a.m.•84 views

EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2022-2866)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an...

9.8CVSS7.8AI score0.89529EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
•added 2022/12/27 12:00 a.m.•56 views

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2022-2884)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an...

9.8CVSS7.8AI score0.89529EPSS
SaveExploits2References8
Rows per page
Query Builder