3051 matches found
UBUNTU-CVE-2024-39573
Potential SSRF in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by modproxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue...
UBUNTU-CVE-2024-38477
null pointer dereference in modproxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue...
UBUNTU-CVE-2024-38475
Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...
UBUNTU-CVE-2024-38474
Substitution encoding issue in modrewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to...
CVE-2024-38475
CVE-2024-38475 affects Apache HTTP Server 2.4.59 and earlier, where improper escaping of output in mod_rewrite can map URLs to filesystem locations that are served but not directly reachable, enabling remote code execution or source code disclosure. The issue also involves substitutions in server...
CVE-2024-38475
Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...
PT-2024-5848
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.59 and earlier Description The issue is related to a substitution encoding problem in the mod rewrite module of the Apache HTTP Server, allowing an attacker to execute scripts in directories permitted by the...
Apache HTTP Server 输入验证错误漏洞
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server, which can be exploited by an attacker to cause insecure...
Debian: Security Advisory (DSA-5717-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2024-5823 Malicious code in pythonsqlite2mod (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Pathoschild.Stardew.Mod.BuildConfig (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Pathoschild.Stardew.Mod.Build.Config (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Debian dsa-5717 : libapache2-mod-php8.2 - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5717 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5717-1 [email protected] https://www.debian.org/security/ Moritz...
CVE-2024-6084
A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as critical. Affected by this vulnerability is the function uploadImage of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to...
Debian dla-3833 : libapache2-mod-php7.3 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3833 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3833-1 [email protected]...
OPENSUSE-SU-2024:10034-1 apache2-mod_security2-2.9.0-5.6 on GA media
These are all security issues fixed in the apache2-modsecurity2-2.9.0-5.6 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12971-1 apache2-mod_apparmor-3.1.4-1.1 on GA media
These are all security issues fixed in the apache2-modapparmor-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13346-1 apache2-mod_uwsgi-2.0.22-1.1 on GA media
These are all security issues fixed in the apache2-moduwsgi-2.0.22-1.1 package on the GA media of openSUSE Tumbleweed...