Lucene search
+L

5867 matches found

Nuclei
Nuclei
added 13 hours ago39 views

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....

10CVSS7.3AI score0.40386EPSS
SaveExploits8References4
Nuclei
Nuclei
added 13 hours ago91 views

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

4.3CVSS5.9AI score0.06643EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added yesterday4 views

Important: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.4AI score0.03914EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added yesterday4 views

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

7.5CVSS6.7AI score0.03914EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...

5.3CVSS6AI score0.00393EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

5.3CVSS6AI score0.00485EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

7.5CVSS7AI score0.00394EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday5 views

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

5.3CVSS6AI score0.00514EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago7 views

CVE-2026-12495

Denial-of-service DoS vulnerability due to a stack buffer overflow in the httpgdprdecrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory...

5.3CVSS0.00162EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2 days ago214 views

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

9.8CVSS7.7AI score0.99471EPSS
SaveExploits20References2
Nuclei
Nuclei
added 2 days ago102 views

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

7.5CVSS7AI score0.90647EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2 days ago6 views

macOS 14.x < 14.8.8 Multiple Vulnerabilities (128072)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.8. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to...

9.8CVSS7.2AI score0.49727EPSS
SaveExploits20References128
OSV
OSV
added 6 days ago5 views

RHSA-2026:42828 Red Hat Security Advisory: httpd:2.4 security, bug fix, and enhancement update

Bulletin has no description...

7.7CVSS6.5AI score0.01089EPSS
SaveExploits0References40
OSV
OSV
added 6 days ago5 views

RHSA-2026:41906 Red Hat Security Advisory: httpd security, bug fix, and enhancement update

Bulletin has no description...

7.7CVSS7AI score0.01089EPSS
SaveExploits2References56
Nuclei
Nuclei
added 6 days ago3351 views

Apache httpd <=2.4.29 - Arbitrary File Upload

Apache httpd 2.4.0 to 2.4.29 is susceptible to arbitrary file upload vulnerabilities via the expression specified in , which could match '$' to a newline character in a malicious filename rather than matching only the end of the filename. This could be exploited in environments where uploads of...

8.1CVSS6.6AI score0.86006EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 6 days ago4 views

Oracle Linux 8 : httpd:2.4 (ELSA-2026-42828)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42828 advisory. - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 -...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits40References10
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.9 views

RockyLinux 9 : httpd (RLSA-2026:41906)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41906 advisory. httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file...

9.8CVSS6.7AI score0.03914EPSS
SaveExploits2References27
OSV
OSV
added 2026/07/21 6:1 p.m.5 views

RLSA-2026:42828 Important: httpd:2.4 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...

7.7CVSS7AI score0.01089EPSS
SaveExploits0References10
Rockylinux
Rockylinux
added 2026/07/21 6:1 p.m.8 views

httpd:2.4 security, bug fix, and enhancement update

An update is available for module.modhttp2, module.httpd, modmd, modhttp2, module.modmd, httpd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd package...

9.8CVSS7AI score0.01089EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/07/21 4:2 p.m.9 views

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

7.5CVSS6.5AI score0.03914EPSS
SaveExploits0References5
Rows per page
Query Builder