7307 matches found
CLSA-2026-1778789558 httpd: Fix of CVE-2022-36760
CVE-2022-36760: modproxyajp: fix possible request smuggling via invalid Transfer-Encoding...
PT-2026-41424
CVE-2026-40328 - Apache HTTP Server XML External Entity XXE Injection CVE ID :CVE-2026-40328 Published : May 13, 2026, 10:16 p.m. | 37 minutes ago Description :Rejected reason: This CVE is a duplicate of another CVE. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affect...
Photon OS 5.0: Httpd PHSA-2026-5.0-0848
An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0848. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Unity Linux 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-017605)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017605 advisory. Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' Tenable has extracted the preceding description block directly from...
Exploit for Observable Timing Discrepancy in Apache Http_Server
CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-...
BIT-APACHE-2026-28780 Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to modproxyajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue...
Apache HTTP Server: Off-by-one OOB reads in AJP getter functions
...
Apache HTTP Server: mod_md unrestricted OCSP response
...
Apache HTTP Server: mod_dav_lock indirect lock crash
...
Apache HTTP Server: mod_authn_socache crash
...
Apache HTTP Server: mod_auth_digest timing attack
...
Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
...
PT-2026-38461
Heap-based Buffer Overflow vulnerability in mod proxy ajp of Apache HTTP Server. If mod proxy ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod proxy ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This...
httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...
Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation
A flaw was found in Apache HTTP Server. This escalation of privilege vulnerability allows local attackers, specifically those with the ability to author .htaccess files, to read sensitive files. This flaw enables unauthorized access to files with the privileges of the httpd user, potentially...
Exploit for Double Free in Apache Http_Server
CVE-2026-23918 CVE-2026-23918: Apache HTTP/2 Double...
SUSE CVE-2026-28780
Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to modproxyajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue...
The vulnerability of the ajp_msg_get_string() function in the Apache HTTP Server allows a hacker to induce a service failure.
The vulnerability of the ajpmsggetstring function in the Apache HTTP Server is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the mod_authn_socache module in the Apache HTTP Server allows a hacker to trigger a service failure.
The vulnerability of the modauthnsocache module in the Apache HTTP Server is related to pointer dereferencing. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ALPINE-CVE-2026-28780
Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to modproxyajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue...