Lucene search
K

8 matches found

OpenVAS
OpenVAS
added 2025/12/04 12:0 a.m.3 views

Apache HTTP Server 2.4.30 - 2.4.65 Integer Overflow Vulnerability - Windows

Apache HTTP Server is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.8AI score0.00048EPSS
Exploits0References2
OSV
OSV
added 2025/07/29 5:38 a.m.3 views

BIT-APACHE-2025-54090 Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue...

6.3CVSS7AI score0.00924EPSS
Exploits0References5
CVE
CVE
added 2025/07/23 1:19 p.m.188 views

CVE-2025-54090

Summary of CVE-2025-54090 : The issue affects Apache HTTP Server, specifically version 2.4.64, where all "RewriteCond expr ..." tests evaluate as true due to a bug in the expression evaluation. The remedy is to upgrade to version 2.4.65, which includes the fix. The provided connected documents co...

6.3CVSS6.2AI score0.00924EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/07/23 1:19 p.m.5 views

CVE-2025-54090 Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue...

0.00924EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.7 views

PT-2025-30579

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.64 Description A flaw exists in Apache HTTP Server where all "RewriteCond expr ..." tests evaluate as true. Recommendations Upgrade to version 2.4.65...

9.1CVSS7.5AI score0.03545EPSS
Exploits2References76
RedhatCVE
RedhatCVE
added 2025/05/22 7:19 a.m.3 views

CVE-2018-1000655

Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsiValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in...

6.5CVSS6.9AI score0.00317EPSS
Exploits1References1
NVD
NVD
added 2018/08/20 7:31 p.m.11 views

CVE-2018-1000655

Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsiValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in...

6.5CVSS6.5AI score0.00317EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/08/20 7:0 p.m.14 views

CVE-2018-1000655

Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsiValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in...

6.5AI score0.00317EPSS
Exploits1References1
Rows per page
Query Builder