Lucene search
K

12 matches found

Fedora
Fedora
added 2026/03/24 1:12 a.m.4 views

[SECURITY] Fedora 42 Update: python-diskcache-5.6.3-12.fc42

DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...

9.8CVSS7.1AI score0.00041EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.2 views

Solaris 10 (i386): 120544-38

SunOS 5.10: SunOS 5.10x86: Apache 2 Patch. Date this patch was last updated by Sun : Oct/07/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255271; scriptversion"1.1";...

7AI score
Exploits0References1
OSV
OSV
added 2025/08/12 8:24 a.m.5 views

ROOT-OS-DEBIAN-12-CVE-2025-23048 CVE-2025-23048 in rootio-apache2 - Patched by Root

Root has patched CVE-2025-23048 in the rootio-apache2 package for Root:Debian:12. Multiple fixed versions available...

9.1CVSS7.3AI score0.00058EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.2 views

SUSE CVE-2004-0113

Memory leak in sslengineio.c for modssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service memory consumption via plain HTTP requests to the SSL port of an SSL-enabled server...

5CVSS6.9AI score0.15723EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.1 views

SUSE CVE-2004-0751

The charbufferread function in the modssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service segmentation fault...

5CVSS6.8AI score0.47686EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.1 views

SUSE CVE-2006-4154

Format string vulnerability in the modtcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a setvar function call in 1 tclcmds.c and 2 tclcore.c...

6.8CVSS7.9AI score0.32788EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:29 a.m.1 views

SUSE CVE-2014-3250

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4...

6.5CVSS6.7AI score0.00259EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:23 a.m.1 views

SUSE CVE-2018-17082

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the phphandler function in sapi/apache2handler/sapiapache2.c...

6.1CVSS9AI score0.04436EPSS
Exploits1References11
OSV
OSV
added 2020/03/17 2:4 p.m.11 views

SUSE-SU-2020:0706-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issues: - CVE-2019-20479: Fixed an open redirect issue in URLs with slash and backslash bsc1164459...

6.1CVSS6.3AI score0.00605EPSS
Exploits0References3
OSV
OSV
added 2017/12/11 5:29 p.m.1 views

DEBIAN-CVE-2014-3250

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4...

6.5CVSS6.6AI score0.00259EPSS
Exploits0References1
OSV
OSV
added 2017/08/23 4:29 p.m.3 views

CVE-2017-12970

Cross-site request forgery CSRF vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that 1 add or 2 delete user accounts via a request to phpsftpd/users.php...

8.8CVSS5.8AI score
Exploits0References4
exploitpack
exploitpack
added 2003/06/08 12:0 a.m.19 views

Apache 2.0.45 - APR Crash

Apache 2.0.45 - APR Crash !/usr/bin/perl Apache 2.0.37 - 2.0.45 APR Exploit Written By Matthew Murphy This Perl script will successfully exploit any un-patched Apache 2.x servers. Base64 Encoder If you want authentication with the server via HTTP's lame Basic auth, put the proper string to encode...

7.4AI score
Exploits0
Rows per page
Query Builder