Lucene search
+L
Osv CleanstartRecent

11062 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-UK90052 HTTP/2 (2

Security vulnerability affects the apache2 package. HTTP/2 2...

7.5CVSS6.7AI score0.14563EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•9 views

CLEANSTART-2026-ZL75334 vulnerability was found in Apache HTTP Server 2

Security vulnerability affects the apache2 package. A vulnerability was found in Apache HTTP Server 2...

4.2CVSS6.3AI score0.08588EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•9 views

CLEANSTART-2026-VK65361 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

Security vulnerability affects the apache2 package. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service...

7.5CVSS7.3AI score0.2789EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•7 views

CLEANSTART-2026-MG62687 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

5.3CVSS6.5AI score0.52612EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•4 views

CLEANSTART-2026-DX94657 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

7.3CVSS7AI score0.54808EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•11 views

CLEANSTART-2026-QB44959 In Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. In Apache HTTP Server versions 2...

9.8CVSS7.8AI score0.68289EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-KT91017 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

7.5CVSS7.3AI score0.4937EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-XX88354 crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning

Security vulnerability affects the apache2 package. A crafted method sent through HTTP/2 will bypass validation and be forwarded by modproxy, which can lead to request splitting or cache poisoning...

7.5CVSS6.4AI score0.46179EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•10 views

CLEANSTART-2026-EV87575 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

5.3CVSS6.7AI score0.51951EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-OA42005 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

7.5CVSS6.8AI score0.56448EPSS
SaveExploits2References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•8 views

CLEANSTART-2026-LV72653 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

7.5CVSS7.7AI score0.88844EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•9 views

CLEANSTART-2026-LB59576 Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3

Security vulnerability affects the apache2 package. An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3...

7.5CVSS7.2AI score0.02445EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-DJ72396 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

5.5CVSS6.3AI score0.11867EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•7 views

CLEANSTART-2026-YH82036 Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well

Security vulnerability affects the apache2 package. Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well...

7.5CVSS7.4AI score0.51489EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•8 views

CLEANSTART-2026-YR89103 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

7.5CVSS7.3AI score0.65308EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•11 views

CLEANSTART-2026-TH04863 Apache HTTP server 2

Security vulnerability affects the apache2 package. Apache HTTP server 2...

9.8CVSS6.9AI score0.90039EPSS
SaveExploits2References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•7 views

CLEANSTART-2026-VO42453 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

6.1CVSS6.7AI score0.56691EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•8 views

CLEANSTART-2026-XG20648 It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2

Security vulnerability affects the apache2 package. It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2...

9.8CVSS8.2AI score0.99964EPSS
SaveExploits69References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•8 views

CLEANSTART-2026-OA19961 ap_escape_quotes() may write beyond the end of a buffer when given malicious input

Security vulnerability affects the apache2 package. apescapequotes may write beyond the end of a buffer when given malicious input...

9.8CVSS7.8AI score0.39402EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-SY05950 carefully crafted request body can cause a read to a random memory area which could cause the process to crash

Security vulnerability affects the apache2 package. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash...

7.5CVSS7.7AI score0.69097EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-PW92766 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

9.8CVSS7.8AI score0.28189EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•4 views

CLEANSTART-2026-UC87477 If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes

Security vulnerability affects the apache2 package. If LimitXMLRequestBody is set to allow request bodies larger than 350MB defaults to 1M on 32 bit systems an integer overflow happens which later causes out of bounds writes...

9.1CVSS8.2AI score0.41713EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•12 views

CLEANSTART-2026-ZP32525 flaw was found in a change made to path normalization in Apache HTTP Server 2

Security vulnerability affects the apache2 package. A flaw was found in a change made to path normalization in Apache HTTP Server 2...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits173References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-GK10724 crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can all...

Security vulnerability affects the apache2 package. A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix...

8.2CVSS7AI score0.82295EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•13 views

CLEANSTART-2026-RW21782 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Security vulnerability affects the apache2 package. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data...

9.8CVSS8.3AI score0.50401EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•10 views

CLEANSTART-2026-LT25186 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

9.8CVSS8AI score0.03543EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-EB87524 While fuzzing the 2

Security vulnerability affects the apache2 package. While fuzzing the 2...

7.5CVSS7.6AI score0.2517EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•7 views

CLEANSTART-2026-QJ65507 Malformed requests may cause the server to dereference a NULL pointer

Security vulnerability affects the apache2 package. Malformed requests may cause the server to dereference a NULL pointer...

7.5CVSS7.4AI score0.64509EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•14 views

CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user

Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...

9CVSS7.6AI score0.99999EPSS
SaveExploits5References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•13 views

CLEANSTART-2026-DN02833 carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)

Security vulnerability affects the apache2 package. A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts...

9.8CVSS8.4AI score0.9684EPSS
SaveExploits6References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•10 views

CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)

Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...

7.5CVSS7.5AI score0.62887EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-QG85837 Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server

Security vulnerability affects the apache2 package. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server...

7.5CVSS6.9AI score0.03003EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-JK21157 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

5.3CVSS7.2AI score0.0382EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-XE02231 Some mod_proxy configurations on Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Some modproxy configurations on Apache HTTP Server versions 2...

9.8CVSS7.2AI score0.84508EPSS
SaveExploits6References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-PA56152 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

7.5CVSS7.4AI score0.06378EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-MY79414 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

7.5CVSS7.7AI score0.05268EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-CY90357 HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi

Security vulnerability affects the apache2 package. HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi...

7.5CVSS7.4AI score0.02134EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•3 views

CLEANSTART-2026-SW90026 If Apache HTTP Server 2

Security vulnerability affects the apache2 package. If Apache HTTP Server 2...

7.5CVSS7.7AI score0.89529EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-FF62100 ap_rwrite() function in Apache HTTP Server 2

Security vulnerability affects the apache2 package. The aprwrite function in Apache HTTP Server 2...

5.3CVSS7AI score0.04977EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•3 views

CLEANSTART-2026-TS50001 attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server

Security vulnerability affects the apache2 package. An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server...

7.5CVSS7.4AI score0.70595EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-IE55797 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards req...

Security vulnerability affects the apache2 package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to...

7.5CVSS8AI score0.21079EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•7 views

CLEANSTART-2026-UI43314 When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately

Security vulnerability affects the apache2 package. When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources were not reclaimed immediately...

5.9CVSS6.8AI score0.03024EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-RK78285 Apache HTTP Server 2

Security vulnerability affects the apache2 package. Apache HTTP Server 2...

9.1CVSS7AI score0.06282EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•4 views

CLEANSTART-2026-WI35416 Prior to Apache HTTP Server 2

Security vulnerability affects the apache2 package. Prior to Apache HTTP Server 2...

5.3CVSS6.7AI score0.55911EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-VL60700 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards req...

Security vulnerability affects the apache2 package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to...

9CVSS6.8AI score0.01879EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•3 views

CLEANSTART-2026-OA48166 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance

Security vulnerability affects the apache2 package. Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...

5.4CVSS6.2AI score0.01715EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•6 views

CLEANSTART-2026-QV20553 SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2...

7.5CVSS6.3AI score0.6947EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•4 views

CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...

7.5CVSS7AI score0.01536EPSS
SaveExploits5References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-OB27244 Encoding problem in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. Encoding problem in modproxy in Apache HTTP Server 2...

8.1CVSS6.7AI score0.25878EPSS
SaveExploits1References3
osv_cleanstart
osv_cleanstart
•added 2026/10/09 12:49 a.m.•5 views

CLEANSTART-2026-CF08389 regression in the core of Apache HTTP Server 2

Security vulnerability affects the apache2 package. A regression in the core of Apache HTTP Server 2...

6.2CVSS6.4AI score0.00889EPSS
SaveExploits0References3
Total number of security vulnerabilities11062