CVE-2022-31813

CVE-2022-31813 affects Apache HTTP Server 2.4.53 and older; due to hop-by-hop handling, X-Forwarded-* headers may be dropped to the origin server, which can enable bypass of IP-based authentication. All connected advisories indicate the fix is in Apache HTTP Server 2.4.54 and related updates in d...

CVE-2021-44790

CVE-2021-44790 affects Apache HTTP Server up to version 2.4.51. It describes a buffer overflow in the mod_lua multipart parser (triggered via r:parsebody() from Lua scripts). Connected documents corroborate this in various advisories and patch notes, indicating releases with fixes (e.g., patched ...

CVE-2021-39275

CVE-2021-39275 affects Apache HTTP Server (httpd) up to 2.4.48 and earlier. The issue is an out-of-bounds write in ap_escape_quotes() when given malicious input, potentially crashing the server or enabling code execution in some environments. Several connected sources concur this vulnerability ex...

CVE-2023-38709

Apache HTTP Server (versions through 2.4.58 ) is vulnerable to HTTP response splitting due to faulty input validation in the core. This flaw allows malicious or exploitable backend/content generators to insert unsanitized headers, such as Content-Type or Content-Encoding , into the response. Prac...

CVE-2022-28615

CVE-2022-28615 affects Apache HTTP Server 2.4.53 and earlier, where a read beyond bounds can occur in ap_strcmp_match() when given a very large input buffer. The issue may affect third‑party modules or lua scripts that call this function. Advisories in connected documents reference an official fi...

CVE-2016-8612

CVE-2016-8612 affects Apache HTTP Server mod_cluster prior to httpd 2.4.23, with a flaw in the protocol parsing logic of the load balancer that can cause a Segmentation Fault in the httpd process due to improper input validation. Exploitation details are not provided in the connected documents; r...

CVE-2022-37436

CVE-2022-37436 affects Apache HTTP Server in versions prior to 2.4.55. The issue allows a malicious backend to truncate response headers early, causing some headers to be incorporated into the response body and preventing the later headers from being interpreted by the client. Affected products i...

CVE-2006-20001

CVE-2006-20001 affects Apache HTTP Server 2.4.54 and earlier. The issue is triggered by a crafted If: header that can read memory or write a single zero byte in heap memory beyond the header value, potentially crashing the process. Industry advisories confirm the vulnerability in Apache httpd and...

CVE-2022-30556

The CVE-2022-30556 issue affects Apache HTTP Server (2.4.53 and earlier) where the wsread path may return a pointer past the end of the buffer, enabling information disclosure via websockets. Public references in connected sources corroborate: (1) industry advisories note an information disclosur...

CVE-2024-40898

The Apache HTTP Server (versions 2.4.0 to 2.4.61 ) is affected by a high-severity vulnerability (CVE-2024-40898) involving the mod_rewrite module. When configured in a server/vhost context , insufficient validation of incoming requests can lead to Server-Side Request Forgery (SSRF) . This allows ...

CVE-2023-31122

CVE-2023-31122 is an out-of-bounds read vulnerability in Apache HTTP Server’s mod_macro affecting versions up to 2.4.57. Connected advisories (Debian, AlmaLinux, Amazon Linux, CIRCL sighting) confirm multiple distro advisories have issued patches and upgrades (e.g., Debian 2.4.59 fixes; AlmaLinux...

CVE-2025-58098

The Apache HTTP Server (versions 2.4.65 and earlier ) is vulnerable to a security flaw when Server Side Includes (SSI) is enabled and mod_cgid (but not mod_cgi) is active. The root cause is that the server passes the shell-escaped query string as extra arguments to the #exec cmd="..." directives....

CVE-2026-28780

Apache HTTP Server versions through 2.4.66 are vulnerable to a heap-based buffer overflow in the mod_proxy_ajp module. The root cause is an off-by-AJP_HEADER_LEN check in the ajp_msg_check_header function, which allows a malicious AJP server to send a crafted message that causes the server to wri...

CVE-1999-0236

The CVE-1999-0236 entry describes a vulnerability in the ScriptAlias directory handling in NCSA and Apache httpd that allowed attackers to read CGI programs. Affected software is the Apache httpd family utilizing ScriptAlias configuration; the underlying issue is directory handling enabling discl...

CVE-2025-49812

Apache HTTP Server versions through 2.4.63 are vulnerable to an HTTP desynchronisation attack via mod_ssl . Specifically, a man-in-the-middle attacker can hijack an HTTP session using a TLS upgrade . This issue only affects configurations where "SSLEngine optional" is used to enable TLS upgrades....

CVE-2026-42535

A path handling issue in the mod_dav_fs module of Apache HTTP Server versions 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases . This manipulation can potentially result in child process crashes , leading to a Denial of Service (DoS) conditio...

CVE-2026-33006

A timing attack exists in the mod_auth_digest module of the Apache HTTP Server (version 2.4.66). The vulnerability stems from the use of a non-constant-time strcmp() function for comparing nonce-hashes and response-digests, which allows a remote attacker to bypass Digest authentication by exploit...

CVE-2026-34032

The Apache HTTP Server is vulnerable to an Improper Null Termination and Out-of-bounds Read vulnerability in the mod_proxy_ajp module. The root cause is located in the ajp_msg_get_string() function, where insufficient length checks allow for reading data beyond the permitted memory range. This fl...

CVE-2026-33857

Apache HTTP Server versions through 2.4.66 are vulnerable to an out-of-bounds read vulnerability within the mod_proxy_ajp module. The root cause involves off-by-one length check errors in the ajp_msg_get_uint8/uint16/uint32 and ajp_msg_peek_uint8/uint16 functions. A remote attacker could exploit ...

CVE-2026-29170

A cross-site scripting (XSS) vulnerability exists in the mod_proxy_ftp module of the Apache HTTP Server (version 2.4.67 and earlier). The flaw occurs during the generation of HTML directory listings when the server lists FTP directory contents through either a forward or reverse proxy configurati...

CVE-2026-34059

The Apache HTTP Server is vulnerable to a heap-based buffer over-read and memory disclosure within the mod_proxy_ajp module. The flaw exists in the ajp_parse_data() function, which occurs when the server handles short AJP replies from a backend server. A malicious actor could exploit this to disc...

CVE-2026-24072

Apache HTTP Server version 2.4.66 and earlier is affected by an escalation of privilege vulnerability in various modules, specifically including mod_rewrite and ap_expr . This flaw allows local .htaccess authors to read files with the privileges of the httpd user. Remediation is available by upgr...

CVE-2005-3352

The CVE-2005-3352 entry documents a cross-site scripting (XSS) vulnerability in the Apache httpd mod_imap (and mod_imagemap) module. The issue arises from improper handling of the Referer header when using image maps, allowing an attacker to inject arbitrary script or HTML. Affected software is A...

CVE-2026-29169

A NULL pointer dereference vulnerability exists in the mod_dav_lock module of the Apache HTTP Server (version 2.4.66 and earlier). A remote attacker can exploit this by sending a malicious request to trigger a denial-of-service (DoS) attack, causing the server to crash. Notably, mod_dav_lock is n...

CVE-2002-0061

Apache HTTP Server on Windows (Win32) is vulnerable prior to versions 1.3.24 and 2.0.x prior to 2.0.34-beta. The flaw allows remote attackers to execute arbitrary commands by sending shell metacharacters (a pipe |) as arguments to batch (.bat) or .cmd scripts, which reach the shell interpreter (c...

CVE-1999-0070

CVE-1999-0070 is associated with the generic test-cgi script vulnerability where an attacker can list files on the server. Red Hat and CVE listings confirm the issue stems from the test-cgi script. The Nessus plugin details an information-disclosure/remote command-execution style flaw: the script...

CVE-2026-93546

The Apache HTTP Server (version 2.4.68 and prior) is vulnerable to an integer overflow in the mod_dav_fs component. An authenticated WebDAV client with write access can crash worker processes and cause persistent corruption of a directory's property database. This is achieved by sending PROPPATCH...