CVE-2024-41594

An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL...

CVE-2024-41594

DrayTek Vigor310 devices up to version 4.3.2.6 are affected by CVE-2024-41594 due to the httpd server seeding the OpenSSL PRNG with a static string. This enables an information-disclosure vector (and related MITM risk) via the Vigor310 management UI. Connected sources provide concrete details: af...

CVE-2024-41594: Inadequate Encryption Strength

An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL...

RHSA-2019:4126 Red Hat Security Advisory: httpd24-httpd security, bug fix, and enhancement update

Bulletin has no description...

Apache HTTPD: Multiple Vulnerabilities

Background The Apache HTTP server is one of the most popular web servers on the Internet. Description Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

GLSA-202409-31 : Apache HTTPD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-31 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

RHSA-2024:4197 Red Hat Security Advisory: httpd:2.4/httpd security update

Bulletin has no description...

RHSA-2024:7101 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:6583 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:6467 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:6468 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:6136 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:5832 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:5812 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:6584 Red Hat Security Advisory: httpd security update

Bulletin has no description...

RHSA-2024:5193 Red Hat Security Advisory: httpd:2.4 security update

Bulletin has no description...

RHSA-2024:5138 Red Hat Security Advisory: httpd security update

Bulletin has no description...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

Important: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

httpd: HTTP response splitting

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting...