7300 matches found
K000162870: Apache HTTP server vulnerability CVE-2026-43951
Security Advisory Description Out-of-bounds Read vulnerability in Apache HTTP Server with modheaders and modmime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. CVE-2026-43951 A remote attacker may be able to disclose sensitive information on the...
Exploit for Path Traversal in Apache Http_Server
AI 오케스트레이션 기반 CVE 분석 — CVE-2021-41773 AI에게 CVE 분석을 시키고, A...
Security Bulletin: IBM HTTP Server shipped with IBM OpenPages is affected by multiple vulnerabilities due to the included Apache HTTP Server
Summary IBM HTTP Server used by IBM WebSphere Application Server, is shipped as a supporting program of IBM OpenPages. Information about multiple vulnerabilities affecting IBM HTTP Server has been published in a security bulletin. These products have addressed the applicable CVEs. For a complete...
Photon OS 5.0: Apache PHSA-2023-5.0-91-0093
An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0093. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-3125)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are...
EulerOS 2.0 SP13 : httpd (EulerOS-SA-2026-3020)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are...
mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase
A flaw was found in Apache HTTP Server. This late release of memory after effective lifetime vulnerability allows a remote, unauthenticated attacker to cause a denial of service DoS. The vulnerability can lead to resource exhaustion, making the server unavailable to legitimate users...
httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.
A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...
httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.
A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...
RHEL 10 : mod_http2 (RHSA-2026:50538)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50538 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: modhttp2:...
Low: Red Hat Bug Fix Advisory: httpd bug fix and enhancement update
An update for httpd is now available for Red Hat Enterprise Linux 10. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Bug Fixes and Enhancements: modproxyhtml regression in CVE-2026-34355 fix JIRA:RHEL-192750...
httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html
A flaw was found in the modproxyhtml module of Apache HTTP Server. An attacker who controls or manipulates HTTP response bodies processed by the proxy can trigger an out-of-bounds memory write. This issue can cause the server process to crash, resulting in a Denial of Service DoS...
Exploit for Out-of-bounds Write in Apache Http_Server
Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790 Apache HTTP...
K000162735: Apache HTTP Server vulnerability CVE-2026-44185
Security Advisory Description Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
K000162692: Buffer Underwrite vulnerability in Apache HTTP Server CVE-2026-44631
Security Advisory Description Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue. CVE-2026-44631 Impa...
K000162672: Apache HTTP Server vulnerability CVE-2026-34356
Security Advisory Description Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RC...
httpd: NULL pointer dereference via specially crafted request
A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...