7022 matches found
CVE-2026-63292 affecting package httpd for versions less than 2.4.69-1
CVE-2026-63292 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1
CVE-2026-46729 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1
CVE-2026-73636 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1
CVE-2026-56153 affecting package httpd for versions less than 2.4.69-1. An upgraded version of the package is available that resolves this issue...
Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1626)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261626 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2023-27522, CVE-2025-49812, CVE-2025-23048,...
Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3202 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already b...
Amazon Linux 2 : httpd (ALAS-2026-3990)
The version of httpd installed on the remote host is prior to 2.4.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3990 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI...
Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1625)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261625 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 24 CVEs: CVE-2023-25690, CVE-2023-31122, CVE-2022-28615,...
httpd: Fix of CVE-2026-56154
CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...
httpd bug fix and enhancement update
An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
CLEANSTART-2026-GY12147 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-PP80959 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-TY04609 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server
Description: This update fixes the following issues: Release notese highlights: Added a note about the SUSE Registry IP address change. Update to SUSE Multi-Linux Manager 5.2.1 Security issues Fixed: CVE-2026-39821 Bugs mentioned bsc1208800, bsc1230568, bsc1230949, bsc1258382, bsc1266481...
httpd: Fix of CVE-2026-56153
CVE-2026-56153: modcharsetlite: out-of-bounds write in finishpartialchar when a partial multibyte character straddles buckets; stop filling ctx-buf once it is full...
Fedora 44 : httpd (2026-34b2d69632)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-34b2d69632 advisory. This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES2.4.69 for more...
XiongMai uc-httpd Overflow (CVE-2018-10088)
Exploits CVE-2018-10088 in XiongMai uc-httpd 1.0.0 used in many IP cameras/DVRs: stack buffer overflow via oversized HTTP headers. Verifies uc-httpd surface and sends the canonical overflow trigger arch-specific shellcode may be required. !/usr/bin/env python3 -- coding: utf-8 -- """XiongMai...
Astra Linux – Vulnerability in Subversion
Apache Subversion SVN’s “authz” feature prevents the display of “copyfrom” paths that should be hidden according to configured path-based authorization rules. When a node is copied from a protected location, users with access to the copy can see the “copyfrom” path of the original node. This also...
