11796 matches found
CLEANSTART-2026-VO42453 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-GK10724 crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can all...
Security vulnerability affects the apache2 package. A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix...
CLEANSTART-2026-XG20648 It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2
Security vulnerability affects the apache2 package. It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2...
CLEANSTART-2026-RW21782 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data
Security vulnerability affects the apache2 package. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data...
CLEANSTART-2026-EB87524 While fuzzing the 2
Security vulnerability affects the apache2 package. While fuzzing the 2...
CLEANSTART-2026-QJ65507 Malformed requests may cause the server to dereference a NULL pointer
Security vulnerability affects the apache2 package. Malformed requests may cause the server to dereference a NULL pointer...
CLEANSTART-2026-ZP32525 flaw was found in a change made to path normalization in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A flaw was found in a change made to path normalization in Apache HTTP Server 2...
CLEANSTART-2026-SY05950 carefully crafted request body can cause a read to a random memory area which could cause the process to crash
Security vulnerability affects the apache2 package. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash...
CLEANSTART-2026-OA19961 ap_escape_quotes() may write beyond the end of a buffer when given malicious input
Security vulnerability affects the apache2 package. apescapequotes may write beyond the end of a buffer when given malicious input...
CLEANSTART-2026-UC87477 If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes
Security vulnerability affects the apache2 package. If LimitXMLRequestBody is set to allow request bodies larger than 350MB defaults to 1M on 32 bit systems an integer overflow happens which later causes out of bounds writes...
CLEANSTART-2026-LT25186 Apache HTTP Server 2
Security vulnerability affects the apache2 package. Apache HTTP Server 2...
CLEANSTART-2026-PW92766 Apache HTTP Server 2
Security vulnerability affects the apache2 package. Apache HTTP Server 2...
CLEANSTART-2026-DN02833 carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)
Security vulnerability affects the apache2 package. A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts...
CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)
Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...
CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user
Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...
CLEANSTART-2026-RK78285 Apache HTTP Server 2
Security vulnerability affects the apache2 package. Apache HTTP Server 2...
CLEANSTART-2026-JK21157 Apache HTTP Server 2
Security vulnerability affects the apache2 package. Apache HTTP Server 2...
CLEANSTART-2026-QG85837 Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server
Security vulnerability affects the apache2 package. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server...
CLEANSTART-2026-FF62100 ap_rwrite() function in Apache HTTP Server 2
Security vulnerability affects the apache2 package. The aprwrite function in Apache HTTP Server 2...
CLEANSTART-2026-SW90026 If Apache HTTP Server 2
Security vulnerability affects the apache2 package. If Apache HTTP Server 2...
CLEANSTART-2026-XE02231 Some mod_proxy configurations on Apache HTTP Server versions 2
Security vulnerability affects the apache2 package. Some modproxy configurations on Apache HTTP Server versions 2...
CLEANSTART-2026-PA56152 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-IE55797 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards req...
Security vulnerability affects the apache2 package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to...
CLEANSTART-2026-WI35416 Prior to Apache HTTP Server 2
Security vulnerability affects the apache2 package. Prior to Apache HTTP Server 2...
CLEANSTART-2026-VL60700 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards req...
Security vulnerability affects the apache2 package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to...
CLEANSTART-2026-MY79414 Apache HTTP Server 2
Security vulnerability affects the apache2 package. Apache HTTP Server 2...
CLEANSTART-2026-TS50001 attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server
Security vulnerability affects the apache2 package. An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server...
CLEANSTART-2026-CY90357 HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi
Security vulnerability affects the apache2 package. HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi...
CLEANSTART-2026-UI43314 When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately
Security vulnerability affects the apache2 package. When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources were not reclaimed immediately...
CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests
Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...
CLEANSTART-2026-BD98589 partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2...
CLEANSTART-2026-QV20553 SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2
Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2...
CLEANSTART-2026-CF08389 regression in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A regression in the core of Apache HTTP Server 2...
CLEANSTART-2026-JH66547 Improper escaping of output in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Improper escaping of output in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-DF56906 HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response
Security vulnerability affects the apache2 package. HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response...
CLEANSTART-2026-EM71520 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses
Security vulnerability affects the apache2 package. Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses...
CLEANSTART-2026-OB27244 Encoding problem in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Encoding problem in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-WF86343 Potential SSRF in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Potential SSRF in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-PP94302 HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack
Security vulnerability affects the apache2 package. HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack...
CLEANSTART-2026-OA48166 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance
Security vulnerability affects the apache2 package. Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...
CLEANSTART-2026-RW47407 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Substitution encoding issue in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-IB07435 Vulnerability in core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. Vulnerability in core of Apache HTTP Server 2...
CLEANSTART-2026-IE39566 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-YK12318 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-WH43251 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-DZ64581 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-TN63603 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-TV45483 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-CG08650 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...