Lucene search
+L

7166 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/11/14 12:00 a.m.•73 views

TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...

6.5CVSS6.4AI score0.00588EPSS
SaveExploits0References2
Oracle linux
Oracle linux
•added 2023/11/11 12:00 a.m.•81 views

httpd and mod_http2 security, bug fix, and enhancement update

httpd 2.4.57-5.0.1 - Replace index.html with Oracle's index page oracleindex.html. 2.4.57-5 - Fix issue found by covscan - Related: 2222001 2.4.57-4 - Resolves: 2217726 - Make PROPFIND tolerant of deletion race 2.4.57-3 - Resolves: 2222001 - modstatus lists BusyWorkers IdleWorkers keys twice...

7.5CVSS7.6AI score0.84508EPSS
SaveExploits6
CBLMariner
CBLMariner
•added 2023/11/08 2:07 a.m.•40 views

CVE-2023-45802 affecting package httpd for versions less than 2.4.58-1

CVE-2023-45802 affecting package httpd for versions less than 2.4.58-1. An upgraded version of the package is available that resolves this issue...

5.9CVSS6.8AI score0.03168EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2023/11/08 2:07 a.m.•31 views

CVE-2023-43622 affecting package httpd for versions less than 2.4.58-1

CVE-2023-43622 affecting package httpd for versions less than 2.4.58-1. An upgraded version of the package is available that resolves this issue...

7.5CVSS7.7AI score0.68818EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2023/11/08 12:00 a.m.•42 views

Fedora: Security Advisory for httpd (FEDORA-2023-3d1bf0ee44)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.0304EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/11/08 12:00 a.m.•60 views

Fedora: Security Advisory for mod_http2 (FEDORA-2023-c0c6a91330)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.99999EPSS
SaveExploits22References4
RedHat Linux
RedHat Linux
•added 2023/11/07 8:33 a.m.•76 views

Moderate: Red Hat Security Advisory: httpd and mod_http2 security, bug fix, and enhancement update

An update for httpd and modhttp2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS7.2AI score0.02134EPSS
SaveExploits0References8
Fedora
Fedora
•added 2023/11/07 2:32 a.m.•62 views

[SECURITY] Fedora 37 Update: mod_http2-2.0.25-1.fc37

The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...

7.5CVSS6.9AI score0.99999EPSS
SaveExploits22
Fedora
Fedora
•added 2023/11/07 1:40 a.m.•67 views

[SECURITY] Fedora 39 Update: mod_http2-2.0.25-1.fc39

The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...

7.5CVSS6.9AI score0.99999EPSS
SaveExploits22
osv_alsa
osv_alsa
•added 2023/11/07 12:00 a.m.•52 views

ALSA-2023:6403 Moderate: httpd and mod_http2 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd 2.4.57. BZ2184403 Security Fixes: httpd: modproxyuwsgi HTTP response splitting CVE-2023-27522 For more details about th...

7.5CVSS9AI score0.02134EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•56 views

Rocky Linux 8 : httpd:2.4 (RLSA-2021:4537)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4537 advisory. - Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compar...

10CVSS7.2AI score0.99999EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•85 views

Rocky Linux 8 : httpd:2.4 (RLSA-2022:7647)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7647 advisory. - A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Serve...

9.8CVSS8AI score0.89529EPSS
SaveExploits2References21
AlmaLinux
AlmaLinux
•added 2023/11/07 12:00 a.m.•78 views

Moderate: httpd and mod_http2 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd 2.4.57. BZ2184403 Security Fixes: httpd: modproxyuwsgi HTTP response splitting CVE-2023-27522 For more details about th...

7.5CVSS7.2AI score0.02134EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•48 views

Fedora 39 : httpd (2023-606f830772)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-606f830772 advisory. New version 2.4.58 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

7.5CVSS7.4AI score0.0304EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/11/05 12:00 a.m.•44 views

Fedora: Security Advisory (FEDORA-2023-606f830772)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.0304EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/11/03 12:00 a.m.•48 views

F5 Networks BIG-IP : Apache HTTPD vulnerability (K78131906)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K78131906 advisory. A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to a...

5.9CVSS6.8AI score0.14991EPSS
SaveExploits0References2
Photon
Photon
•added 2023/11/03 12:00 a.m.•43 views

Important Photon OS Security Update - PHSA-2023-3.0-0680

Updates of 'httpd' packages of Photon OS have been released...

5.9CVSS6.9AI score0.03168EPSS
SaveExploits1
osv_clsa
osv_clsa
•added 2023/11/02 6:28 p.m.•18 views

CLSA-2023-1698949696 httpd: Fix of CVE-2023-31122

CVE-2023-31122: modmacro: Fix out-of-bounds read vulnerability by using own strncmp function...

7.5CVSS7.1AI score0.0304EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/11/02 12:00 a.m.•112 views

Amazon Linux 2 : httpd (ALAS-2023-2322)

The version of httpd installed on the remote host is prior to 2.4.58-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2322 advisory. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57...

7.5CVSS6.8AI score0.68818EPSS
SaveExploits1References8
Photon
Photon
•added 2023/11/01 12:00 a.m.•54 views

Important Photon OS Security Update - PHSA-2023-4.0-0502

Updates of 'httpd' packages of Photon OS have been released...

5.9CVSS6.9AI score0.03168EPSS
SaveExploits1
Rows per page
Query Builder