Lucene search
+L

5885 matches found

OpenVAS
OpenVAS
added 2023/06/09 12:0 a.m.46 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-2191)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.8377EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2023/06/09 12:0 a.m.37 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-2148)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.2AI score0.8377EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2023/06/07 12:0 a.m.47 views

EulerOS Virtualization 2.11.1 : httpd (EulerOS-SA-2023-2071)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location...

9.8CVSS7.5AI score0.8377EPSS
SaveExploits5References7
OpenVAS
OpenVAS
added 2023/06/07 12:0 a.m.36 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-2071)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.8377EPSS
SaveExploits5References2
RedHat Linux
RedHat Linux
added 2023/06/05 12:30 p.m.8 views

httpd: mod_dav: out-of-bounds read/write of zero byte

A flaw was found in the moddav module of httpd. A specially crafted "If:" request header can cause a memory read or write of a single zero byte due to a missing error check, resulting in a Denial of Service...

7.5CVSS7.1AI score0.03546EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/06/05 11:46 a.m.8 views

httpd: mod_dav: out-of-bounds read/write of zero byte

A flaw was found in the moddav module of httpd. A specially crafted "If:" request header can cause a memory read or write of a single zero byte due to a missing error check, resulting in a Denial of Service...

7.5CVSS7.1AI score0.03546EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/06/02 12:0 a.m.48 views

EulerOS Virtualization 2.9.1 : httpd (EulerOS-SA-2023-1998)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location...

9.8CVSS7.1AI score0.8377EPSS
SaveExploits5References6
OpenVAS
OpenVAS
added 2023/06/01 12:0 a.m.43 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-2019)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.8377EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2023/06/01 12:0 a.m.49 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1998)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.8377EPSS
SaveExploits5References2
Rockylinux
Rockylinux
added 2023/05/25 7:53 p.m.68 views

httpd bug fix update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/05/24 8:59 a.m.13 views

httpd: HTTP request splitting with mod_rewrite and mod_proxy

A vulnerability was found in httpd. This security issue occurs when some modproxy configurations on Apache HTTP Server allow an HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern...

9.8CVSS6.6AI score0.8377EPSS
SaveExploits5References5
RedHat Linux
RedHat Linux
added 2023/05/24 8:59 a.m.98 views

Important: Red Hat Security Advisory: httpd24-httpd security update

An update for httpd24-httpd is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

9.8CVSS6.7AI score0.8377EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2023/05/24 12:0 a.m.89 views

RHEL 7 : httpd24-httpd (RHSA-2023:3292)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3292 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: HTTP request splitting wi...

9.8CVSS7AI score0.8377EPSS
SaveExploits5References4
NVD
NVD
added 2023/05/23 1:15 a.m.48 views

CVE-2023-31741

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.3AI score0.02354EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/22 5:15 p.m.30 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.3AI score0.09075EPSS
SaveExploits2References1
Prion
Prion
added 2023/05/22 5:15 p.m.26 views

Command injection

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

5.8CVSS7.3AI score0.09075EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/05/22 12:0 a.m.36 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.6AI score0.09075EPSS
SaveExploits2References1
Rockylinux
Rockylinux
added 2023/05/18 7:17 p.m.109 views

2.4 bug fix update

An update is available for modhttp2, modmd, httpd, module.httpd, module.modmd, module.modhttp2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd package...

6.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/05/17 12:0 a.m.36 views

(Pwn2Own) Lexmark MC3224i fax_change_faxtrace_setting Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the faxchangefaxtracesettings script. The issue results from the lack...

8.8CVSS7.3AI score0.37835EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2023/05/16 12:0 a.m.36 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1932)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.7AI score0.57941EPSS
SaveExploits0References2
Rows per page
Query Builder