agentprime: apache-software-foundation-apache-http-server

agentprime: apache-software-foundation-apache-http-serverEvery new CVE for apache-software-foundation-apache-http-server.https://agentprime.io/CVE-2026-63686: Apache HTTP Server: mod_xml2enc crash on charset conversion failurehttps://agentprime.io/advisories/CVE-2026-63686/https://agentprime.io/advisories/CVE-2026-63686/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:20:14 GMTCVECVE-2026-93546: Apache HTTP Server: mod_dav_fs namespace overflowhttps://agentprime.io/advisories/CVE-2026-93546/https://agentprime.io/advisories/CVE-2026-93546/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:19:32 GMTCVECVE-2026-79768: Apache HTTP Server: mod_userdir information disclosurehttps://agentprime.io/advisories/CVE-2026-79768/https://agentprime.io/advisories/CVE-2026-79768/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:18:57 GMTCVECVE-2026-73637: Apache HTTP Server: mod_auth_digest DoS attackhttps://agentprime.io/advisories/CVE-2026-73637/https://agentprime.io/advisories/CVE-2026-73637/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:18:30 GMTCVECVE-2026-73636: Apache HTTP Server: mod_auth_digest one-time-nonce replay attackhttps://agentprime.io/advisories/CVE-2026-73636/https://agentprime.io/advisories/CVE-2026-73636/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:17:59 GMTCVECVE-2026-63718: Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smugglinghttps://agentprime.io/advisories/CVE-2026-63718/https://agentprime.io/advisories/CVE-2026-63718/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:17:06 GMTCVECVE-2026-63292: Apache HTTP Server: mod_vhost_alias stack overflowhttps://agentprime.io/advisories/CVE-2026-63292/https://agentprime.io/advisories/CVE-2026-63292/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:11:47 GMTCVECVE-2026-63045: Apache HTTP Server: mod_proxy_ftp PASV address handlinghttps://agentprime.io/advisories/CVE-2026-63045/https://agentprime.io/advisories/CVE-2026-63045/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:09:07 GMTCVECVE-2026-59797: Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-functionhttps://agentprime.io/advisories/CVE-2026-59797/https://agentprime.io/advisories/CVE-2026-59797/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:08:31 GMTCVEcriticalCVE-2026-59685: Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEMhttps://agentprime.io/advisories/CVE-2026-59685/https://agentprime.io/advisories/CVE-2026-59685/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:07:51 GMTCVECVE-2026-58415: Apache HTTP Server: mod_dav_fs property database read accesshttps://agentprime.io/advisories/CVE-2026-58415/https://agentprime.io/advisories/CVE-2026-58415/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:07:20 GMTCVECVE-2026-57941: Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancyhttps://agentprime.io/advisories/CVE-2026-57941/https://agentprime.io/advisories/CVE-2026-57941/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:06:53 GMTCVEcriticalCVE-2026-56449: Apache HTTP Server: mod_proxy_html: crash in dump_contenthttps://agentprime.io/advisories/CVE-2026-56449/https://agentprime.io/advisories/CVE-2026-56449/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:06:24 GMTCVECVE-2026-56154: Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}https://agentprime.io/advisories/CVE-2026-56154/https://agentprime.io/advisories/CVE-2026-56154/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:03:52 GMTCVEcriticalCVE-2026-56153: Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_charhttps://agentprime.io/advisories/CVE-2026-56153/https://agentprime.io/advisories/CVE-2026-56153/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:03:25 GMTCVECVE-2026-48005: Apache HTTP Server: mod_auth_digest reauthentication attackhttps://agentprime.io/advisories/CVE-2026-48005/https://agentprime.io/advisories/CVE-2026-48005/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:01:35 GMTCVECVE-2026-47360: Apache HTTP Server: mod_session: Session cookie not removed during internal redirecthttps://agentprime.io/advisories/CVE-2026-47360/https://agentprime.io/advisories/CVE-2026-47360/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 16:00:51 GMTCVECVE-2026-46729: Apache HTTP Server: mod_heartmonitor denial of servicehttps://agentprime.io/advisories/CVE-2026-46729/https://agentprime.io/advisories/CVE-2026-46729/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 15:55:27 GMTCVECVE-2026-42356: Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directorieshttps://agentprime.io/advisories/CVE-2026-42356/https://agentprime.io/advisories/CVE-2026-42356/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 15:54:35 GMTCVECVE-2026-42528: Apache HTTP Server: mod_dav shared lock overflowhttps://agentprime.io/advisories/CVE-2026-42528/https://agentprime.io/advisories/CVE-2026-42528/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 15:52:51 GMTCVECVE-2026-49975: Apache HTTP Server: mod_http2 denial of servicehttps://agentprime.io/advisories/CVE-2026-49975/https://agentprime.io/advisories/CVE-2026-49975/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.33 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:26:04 GMTCVEcriticalCVE-2026-48913: Apache HTTP Server: mod_http2 memory corruption when file handles exhaustedhttps://agentprime.io/advisories/CVE-2026-48913/https://agentprime.io/advisories/CVE-2026-48913/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:24:52 GMTCVECVE-2026-42536: Apache HTTP Server: mod_xml2enc heap overflowhttps://agentprime.io/advisories/CVE-2026-42536/https://agentprime.io/advisories/CVE-2026-42536/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:23:46 GMTCVECVE-2026-44185: Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`https://agentprime.io/advisories/CVE-2026-44185/https://agentprime.io/advisories/CVE-2026-44185/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:22:11 GMTCVECVE-2026-34355: Apache HTTP Server: mod_proxy_html buffer overflowhttps://agentprime.io/advisories/CVE-2026-34355/https://agentprime.io/advisories/CVE-2026-34355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:20:30 GMTCVECVE-2026-44631: Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflowhttps://agentprime.io/advisories/CVE-2026-44631/https://agentprime.io/advisories/CVE-2026-44631/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:19:23 GMTCVEcriticalCVE-2026-44119: Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple moduleshttps://agentprime.io/advisories/CVE-2026-44119/https://agentprime.io/advisories/CVE-2026-44119/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:17:31 GMTCVECVE-2026-43951: Apache HTTP Server: OOB Read in `merge_response_headers` can cause crashhttps://agentprime.io/advisories/CVE-2026-43951/https://agentprime.io/advisories/CVE-2026-43951/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:16:14 GMTCVECVE-2026-42535: Apache HTTP Server: mod_dav_fs protected directory accesshttps://agentprime.io/advisories/CVE-2026-42535/https://agentprime.io/advisories/CVE-2026-42535/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:14:49 GMTCVEcriticalCVE-2026-34356: Apache HTTP Server: ProxyPassReverseCookieMap buffer overflowhttps://agentprime.io/advisories/CVE-2026-34356/https://agentprime.io/advisories/CVE-2026-34356/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:12:21 GMTCVECVE-2026-44186: Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftphttps://agentprime.io/advisories/CVE-2026-44186/https://agentprime.io/advisories/CVE-2026-44186/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:11:12 GMTCVECVE-2026-29170: Apache HTTP Server: mod_proxy_ftp XSShttps://agentprime.io/advisories/CVE-2026-29170/https://agentprime.io/advisories/CVE-2026-29170/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:10:09 GMTCVECVE-2026-29167: Apache HTTP Server: mod_ldap per-dir use-after-freehttps://agentprime.io/advisories/CVE-2026-29167/https://agentprime.io/advisories/CVE-2026-29167/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 15:07:59 GMTCVEcriticalCVE-2026-28780: Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()https://agentprime.io/advisories/CVE-2026-28780/https://agentprime.io/advisories/CVE-2026-28780/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 21:29:41 GMTCVEcriticalCVE-2026-29168: Apache HTTP Server: mod_md unrestricted OCSP responsehttps://agentprime.io/advisories/CVE-2026-29168/https://agentprime.io/advisories/CVE-2026-29168/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 13:10:05 GMTCVECVE-2026-29169: Apache HTTP Server: mod_dav_lock indirect lock crashhttps://agentprime.io/advisories/CVE-2026-29169/https://agentprime.io/advisories/CVE-2026-29169/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 14:48:29 GMTCVECVE-2026-23918: Apache HTTP Server: http2: double free and possible RCE on early resethttps://agentprime.io/advisories/CVE-2026-23918/https://agentprime.io/advisories/CVE-2026-23918/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.50 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 14:44:28 GMTCVEcriticalCVE-2026-33006: Apache HTTP Server: mod_auth_digest timing attackhttps://agentprime.io/advisories/CVE-2026-33006/https://agentprime.io/advisories/CVE-2026-33006/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 14:42:03 GMTCVECVE-2026-33007: Apache HTTP Server: mod_authn_socache crashhttps://agentprime.io/advisories/CVE-2026-33007/https://agentprime.io/advisories/CVE-2026-33007/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 14:41:27 GMTCVECVE-2026-33523: Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status linehttps://agentprime.io/advisories/CVE-2026-33523/https://agentprime.io/advisories/CVE-2026-33523/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 14:40:41 GMTCVECVE-2026-33857: Apache HTTP Server: Off-by-one OOB reads in AJP getter functionshttps://agentprime.io/advisories/CVE-2026-33857/https://agentprime.io/advisories/CVE-2026-33857/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 13:07:30 GMTCVECVE-2026-34032: Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)https://agentprime.io/advisories/CVE-2026-34032/https://agentprime.io/advisories/CVE-2026-34032/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 12:54:54 GMTCVECVE-2026-34059: Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()https://agentprime.io/advisories/CVE-2026-34059/https://agentprime.io/advisories/CVE-2026-34059/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 12:39:42 GMTCVECVE-2026-24072: Apache HTTP Server: mod_rewrite elevation of privileges via ap_exprhttps://agentprime.io/advisories/CVE-2026-24072/https://agentprime.io/advisories/CVE-2026-24072/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 12:37:57 GMTCVECVE-2025-58098: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...https://agentprime.io/advisories/CVE-2025-58098/https://agentprime.io/advisories/CVE-2025-58098/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 13:40:39 GMTCVECVE-2025-66200: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfohttps://agentprime.io/advisories/CVE-2025-66200/https://agentprime.io/advisories/CVE-2025-66200/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 11:02:25 GMTCVECVE-2025-65082: Apache HTTP Server: CGI environment variable overridehttps://agentprime.io/advisories/CVE-2025-65082/https://agentprime.io/advisories/CVE-2025-65082/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 10:46:27 GMTCVECVE-2025-59775: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRFhttps://agentprime.io/advisories/CVE-2025-59775/https://agentprime.io/advisories/CVE-2025-59775/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 10:17:03 GMTCVECVE-2025-55753: Apache HTTP Server: mod_md (ACME), unintended retry intervalshttps://agentprime.io/advisories/CVE-2025-55753/https://agentprime.io/advisories/CVE-2025-55753/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 10:12:22 GMTCVECVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64https://agentprime.io/advisories/CVE-2025-54090/https://agentprime.io/advisories/CVE-2025-54090/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Jul 2025 13:19:25 GMTCVE