Advisories · Technology
Apache HTTP Server.
Every CVE that names Apache HTTP Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Insufficient verification of data authenticity in Apache HTTP Server
- Apache HTTP Server
- CWE-345
-
Apache HTTP Server: Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2…
- Apache HTTP Server
-
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
- Apache HTTP Server
-
Apache HTTP Server versions 2.4.20 to 2.4.43.
- Apache HTTP Server
-
Open redirect in Apache HTTP Server
- Apache HTTP Server
- Open redirect
-
Apache HTTP Server: In Apache HTTP Server 2.4.0 to 2.4.41…
- Apache HTTP Server
-
Apache HTTP Server: In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input…
- Apache HTTP Server
-
Apache HTTP Server: In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted…
- Apache HTTP Server
-
Apache HTTP Server: In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported…
- Apache HTTP Server
-
Open redirect in Apache HTTP Server
- Apache HTTP Server
- Open redirect
-
HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes.
- Apache HTTP Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Use after free in Apache HTTP Server
- Apache HTTP Server
- Memory corruption
-
Apache HTTP Server: In Apache HTTP Server 2.4 release 2.4.38 and prior…
- Apache HTTP Server
-
Apache HTTP Server: In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38…
- Apache HTTP Server