Lucene search
+L

11762 matches found

CNNVD
CNNVD
added 2026/05/04 12:0 a.m.10 views

Apache HTTP Server 缓冲区错误漏洞

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. Versions of Apache HTTP Server 2.4.66 and earlier contain a buffer error vulnerability, which...

5.3CVSS6AI score0.00485EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/04 12:0 a.m.12 views

Apache HTTP Server 代码问题漏洞

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. Versions of Apache HTTP Server 2.4.66 and earlier have code vulnerabilities related to null...

5.3CVSS5.9AI score0.00514EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2026/05/04 12:0 a.m.15 views

KLA91019 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code, inject malicious code, gain privileges. Below is a complete list of...

9.8CVSS6.4AI score0.49727EPSS
SaveExploits18References3
CNNVD
CNNVD
added 2026/05/04 12:0 a.m.14 views

Apache HTTP Server 安全漏洞

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. Apache HTTP Server versions 2.4.66 and earlier contain security vulnerabilities, which stem fro...

6.5CVSS5.8AI score0.00436EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2026/05/04 12:0 a.m.48 views

www/apache24 -- Multiple vulnerabilities

The Apache httpd project reports: modproxyajp: CVE-2026-34059, CVE-2026-34032, CVE-2026-33857, CVE-2026-28780 multiple modules: CVE-2026-33523 modauthnsocache: CVE-2026-33007 modauthdigest: CVE-2026-33006 moddavlock: moddavlock modmd: CVE-2026-29168 modrewrite: CVE-2026-24072 modhttp2:...

9.8CVSS5.8AI score0.49727EPSS
SaveExploits18References1
Positive Technologies
Positive Technologies
added 2026/05/03 12:0 a.m.13 views

PT-2026-36927

CVE-2026-6481 - Apache HTTP Server Remote Code Execution CVE ID :CVE-2026-6481 Published : May 2, 2026, 11:16 p.m. | 2 hours, 24 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details,...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/02 12:0 a.m.22 views

PT-2026-36748

CVE-2025-8903 - Apache HTTP Server Remote Code Execution Vulnerability CVE ID :CVE-2025-8903 Published : May 1, 2026, 8:16 p.m. | 1 hour, 54 minutes ago Description :Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-2052. Reason: This candidate is a reservation...

8.8CVSS5.9AI score0.00774EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/01 6:16 a.m.6 views

CVE-2026-7554

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitatio...

8.1CVSS0.01097EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/05/01 4:45 a.m.5 views

EUVD-2026-26480

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitatio...

6.3CVSS4.6AI score0.01097EPSS
SaveExploits1References5
CVE
CVE
added 2026/05/01 4:45 a.m.16 views

CVE-2026-7554

CVE-2026-7554 affects D-Link M60 firmware up to 1.20B02. The issue involves an unknown functionality in /usr/bin/httpd, which enables weak password recovery. It can be exploited remotely with high attack complexity, and public disclosures indicate the exploit may be used. The CVSS indications in ...

8.1CVSS5.2AI score0.01097EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/04/29 9:0 a.m.11 views

CLSA-2026-1777453233 Fix CVE(s): CVE-2026-21925, CVE-2026-21932, CVE-2026-21933, CVE-2026-21945

OpenJDK 11.0.30 release, build 7. - CVE-2026-21925: Improve JMX connections - CVE-2026-21932: Enhance handling of URIs AWT/JavaFX - CVE-2026-21933: Improve HttpServer request handling - CVE-2026-21945: Enhance certificate checking - Release notes:...

7.5CVSS6.4AI score0.00864EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/29 7:0 a.m.17 views

CLSA-2026-1777279119 java-11-openjdk: Fix of 6 CVEs

Upgrade to openjdk-11.0.30+7 GA. The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 -...

7.5CVSS6.4AI score0.00864EPSS
SaveExploits6References1
OSV
OSV
added 2026/04/28 4:28 p.m.13 views

CLSA-2026-1777393695 java-11-openjdk: Fix of 6 CVEs

Upgrade to openjdk-11.0.30+7 GA. The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 -...

7.5CVSS5.8AI score0.00864EPSS
SaveExploits6References1
OSV
OSV
added 2026/04/28 4:13 p.m.16 views

CLSA-2026-1777392820 java-11-openjdk: Fix of 6 CVEs

Upgrade to openjdk-11.0.30+7 GA. The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 -...

7.5CVSS6AI score0.00864EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
added 2026/04/28 12:27 p.m.13 views

CVE-2026-6993

A flaw was found in go-kratos kratos. A remote attacker could exploit a vulnerability in the HTTP server's NewServer function, specifically within the http.DefaultServeMux Fallback Handler. This manipulation creates an unintended intermediary, which can lead to the disclosure of sensitive...

6.9CVSS5.5AI score0.00315EPSS
SaveExploits0References10
NVD
NVD
added 2026/04/27 9:16 a.m.12 views

CVE-2026-7098

A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been...

9CVSS0.00619EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.12 views

Tenda F456 缓冲区错误漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of parameters in the formWrlExtraSet function of the goform/WrlExtraSet file within the httpd...

9CVSS7.5AI score0.00619EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/26 12:16 p.m.14 views

CVE-2026-7035

A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. Executing a manipulation of the argument Go can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has be...

9CVSS0.00619EPSS
SaveExploits1References5
NVD
NVD
added 2026/04/25 7:16 p.m.8 views

CVE-2026-6993

A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the component http.DefaultServeMux Fallback Handler. The manipulation results in unintended intermediary. The attack may be launched remotely. The explo...

6.9CVSS0.00315EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2026/04/25 9:20 a.m.220 views

Exploit for Path Traversal in Apache Http_Server

Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-417...

9.8CVSS9.5AI score0.99992EPSS
SaveExploits153
Rows per page
Query Builder