Lucene search
+L

11824 matches found

Positive Technologies
Positive Technologies
โ€ขadded 2025/06/24 12:0 a.m.โ€ข11 views

PT-2025-26676 ยท Apache ยท Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue allows an attacker to consume all available session slots, blocking other users from logging in and preventing legitimate users from accessing the product...

4.2CVSS6.1AI score0.00172EPSS
SaveExploits0References3
OSV
OSV
โ€ขadded 2025/06/24 12:0 a.m.โ€ข7 views

ALSA-2025:9466 Moderate: mod_proxy_cluster security update

The modproxycluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fixes: modproxycluster: modproxycluster unauthorized MCMP requests CVE-2024-10306 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...

5.4CVSS5.4AI score0.00314EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/24 12:0 a.m.โ€ข10 views

PT-2025-26702 ยท Apache ยท Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns HTTP Request Smuggling in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices worldwide or real-world...

6.4AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/24 12:0 a.m.โ€ข10 views

PT-2025-26704 ยท Apache ยท Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Stored XSS in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

5.6AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/24 12:0 a.m.โ€ข8 views

PT-2025-26703 ยท Apache ยท Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

6.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/24 12:0 a.m.โ€ข14 views

PT-2025-26701 ยท Apache ยท Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/24 12:0 a.m.โ€ข8 views

PT-2025-26699 ยท Apache ยท Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a command injection problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

7AI score
SaveExploits0References2
NVD
NVD
โ€ขadded 2025/06/23 10:15 p.m.โ€ข12 views

CVE-2025-6526

A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects some unknown processing of the component HTTP Server. The manipulation leads to insufficiently protected credentials. The attack can only be done within the local network. The...

5.3CVSS0.00501EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
โ€ขadded 2025/06/23 10:0 p.m.โ€ข8 views

CVE-2025-6526 70mai M300 HTTP Server insufficiently protected credentials

A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects some unknown processing of the component HTTP Server. The manipulation leads to insufficiently protected credentials. The attack can only be done within the local network. The...

3.1CVSS6.7AI score0.00501EPSS
SaveExploits1References4
CVE
CVE
โ€ขadded 2025/06/23 10:0 p.m.โ€ข40 views

CVE-2025-6526

CVE-2025-6526 affects 70mai M300 up to 20250611, specifically the HTTP Server component. The vulnerability arises from insufficient protection of credentials, enabling an attack that can be performed from within the local network. The documented attack complexity is high and exploitation is descr...

5.3CVSS6.7AI score0.00501EPSS
SaveExploits1References4Affected Software1
RedHat Linux
RedHat Linux
โ€ขadded 2025/06/23 4:2 p.m.โ€ข14 views

Important: Red Hat Security Advisory: mod_auth_openidc security update

An update for modauthopenidc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS6.5AI score0.01424EPSS
SaveExploits0References2
Rosalinux
Rosalinux
โ€ขadded 2025/06/23 8:0 a.m.โ€ข17 views

Advisory ROSA-SA-2025-2902

Software: httpd 2.4.37 OS: ROSA Virtualization 3.0 packageevrstring: httpd-2.4.37-62.rv30 CVE-ID: CVE-2024-38472 BDU-ID: 2024-05354 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Apache HTTP Server web server is related to insufficient validation of incoming requests. Exploitation of the...

9.1CVSS7.6AI score0.6947EPSS
SaveExploits6
Rosalinux
Rosalinux
โ€ขadded 2025/06/23 7:57 a.m.โ€ข14 views

Advisory ROSA-SA-2025-2901

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: httpd-2.4.37-51.rv3.5 CVE-ID: CVE-2024-38472 BDU-ID: 2024-05354 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Apache HTTP Server web server is related to insufficient validation of incoming requests. Exploitation of the...

9.1CVSS7.6AI score0.6947EPSS
SaveExploits6
Rosalinux
Rosalinux
โ€ขadded 2025/06/23 7:50 a.m.โ€ข21 views

Advisory ROSA-SA-2025-2900

Software: httpd 2.4.37 OS: ROSA Virtualization 3.0 packageevrstring: httpd-2.4.37-62.rv30 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries...

9.1CVSS10AI score0.81466EPSS
SaveExploits14
Rosalinux
Rosalinux
โ€ขadded 2025/06/23 7:37 a.m.โ€ข32 views

Advisory ROSA-SA-2025-2899

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: httpd-2.4.37-51.rv3.5 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries...

9.1CVSS10AI score0.81466EPSS
SaveExploits14
Tenable Nessus
Tenable Nessus
โ€ขadded 2025/06/23 12:0 a.m.โ€ข5 views

RHEL 9 : mod_auth_openidc (RHSA-2025:9396)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9396 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...

7.5CVSS6.3AI score0.01424EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/23 12:0 a.m.โ€ข20 views

PT-2025-26649

Name of the Vulnerable Software and Affected Versions: 70mai M300 versions up to 20250611 Description: A problematic issue has been found in the HTTP Server component, leading to insufficiently protected credentials. The attack can only be done within the local network and has a high complexity,...

5.3CVSS3.1AI score0.00501EPSS
SaveExploits1References8
AlmaLinux
AlmaLinux
โ€ขadded 2025/06/23 12:0 a.m.โ€ข18 views

Important: mod_auth_openidc security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled...

7.5CVSS7.4AI score0.01424EPSS
SaveExploits0References4
Information Security Automation
Information Security Automation
โ€ขadded 2025/06/21 1:39 p.m.โ€ข89 views

June โ€œIn the Trend of VMโ€ (#16): vulnerabilities in Microsoft Windows, Apache HTTP Server, the web interfaces of MDaemon and Zimbra, and the 7-Zip archiver

June "In the Trend of VM" 16: vulnerabilities in Microsoft Windows, Apache HTTP Server, the web interfaces of MDaemon and Zimbra, and the 7-Zip archiver. A traditional monthly vulnerability roundup. Post on Habr rus Digest on the PT website rus A total of 7 trending vulnerabilities: Elevation of...

9.1CVSS6.9AI score0.99957EPSS
SaveExploits4
Positive Technologies
Positive Technologies
โ€ขadded 2025/06/19 12:0 a.m.โ€ข11 views

PT-2025-26491 ยท Undefined ยท Undefined

CVE-2016-3399 - "CVE-2022-1234: Apache HTTP Server Unauthenticated Remote Code Execution" CVE ID : CVE-2016-3399 Published : June 19, 2025, 9:15 a.m. | 2 hours, 57 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 |...

8.8CVSS7.4AI score0.00715EPSS
SaveExploits1References1
Rows per page
Query Builder