14755 matches found
Ubuntu 18.04 LTS / 20.04 LTS : Apache HTTP Server vulnerabilities (USN-5212-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5212-1 advisory. It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy requests. A remote attacker could use this issue to...
EulerOS Virtualization 3.0.2.6 : httpd (EulerOS-SA-2021-2878)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in modauthdigest. There is...
Path Traversal in http-server-node
All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...
GHSA-HJ3M-V758-JWX5 Path Traversal in http-server-node
All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...
Oracle Linux 8 : httpd:2.4 (ELSA-2022-9005)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9005 advisory. - scoreboard: fix null pointer deference Orabug: 33690670CVE-2021-34798 Tenable has extracted the preceding description block directly from the Oracle...
GO-2021-0141
A Go HTTP server which reads from the request body while simultaneously writing a response can panic when clients send a "Expect: 100-continue" header...
PT-2022-28294
Name of the Vulnerable Software and Affected Versions Go HTTP server affected versions not specified Description The issue occurs when a Go HTTP server reads from the request body while simultaneously writing a response and the client sends a "Expect: 100-continue" header, causing the server to...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2878)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2923)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : httpd (EulerOS-SA-2021-2931)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. CVE-2021-34798 -...
EulerOS 2.0 SP9 : httpd (EulerOS-SA-2021-2923)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. CVE-2021-34798 -...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2832)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.0 : python (EulerOS-SA-2021-2825)
According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...
EulerOS Virtualization 3.0.2.0 : httpd (EulerOS-SA-2021-2832)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in modauthdigest. There is...
CVE-2021-4161
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server...
Code injection
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server...
CVE-2021-4161 ICSA-21-357-01 Moxa MGate Protocol Gateways
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a...
EulerOS 2.0 SP8 : httpd (EulerOS-SA-2021-2803)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. CVE-2021-34798 -...