Filters
Apache HTTP serverIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxyi…
5.3
First published (updated )
Apache HTTP serverIt was discovered that in httpd 2.4, the internal API function ap_some_auth_required() could incorre…
4.3
First published (updated )
Apache HTTP servermod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not su…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache HTTP serverMemory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache …
First published (updated )
Apache HTTP serverThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server …
4.3
First published (updated )
Apache HTTP serverThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache HTTP serverThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHe…
First published (updated )
Oracle HTTP ServerThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before…
First published (updated )
Oracle HTTP ServerThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server b…
First published (updated )
Canonical Ubuntu Linuxmod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache HTTP serverenvvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name…
6.9
First published (updated )