| CVE-2025-53020 |
Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server
|
Not rated
|
Jul 10, 2025 |
| CVE-2025-49812 |
In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows…
|
Not rated
|
Jul 10, 2025 |
| CVE-2025-49630 |
In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63…
|
Not rated
|
Jul 10, 2025 |
| CVE-2025-23048 |
In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted…
|
Not rated
|
Jul 10, 2025 |
| CVE-2024-43394 |
Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a…
|
Not rated
|
Jul 10, 2025 |
| CVE-2024-47252 |
Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted…
|
Not rated
|
Jul 10, 2025 |
| CVE-2024-43204 |
SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL…
|
Not rated
|
Jul 10, 2025 |
| CVE-2024-42516 |
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type…
|
Not rated
|
Jul 10, 2025 |
| CVE-2024-40725 |
A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type…
|
Not rated
|
Jul 18, 2024 |
| CVE-2024-40898 |
SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes…
|
Not rated
|
Jul 18, 2024 |
| CVE-2024-39884 |
A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of…
|
Not rated
|
Jul 4, 2024 |
| CVE-2024-39573 |
Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules…
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-38477 |
null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server…
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-38476 |
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local…
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-38475 |
Exploited
Apache HTTP Server Improper Escaping of Output Vulnerability
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-38474 |
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts…
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-38473 |
Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be…
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-38472 |
Apache HTTP Server on WIndows UNC SSRF
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-36387 |
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a…
|
Not rated
|
Jul 1, 2024 |
| CVE-2024-27316 |
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP…
|
Not rated
|
Apr 4, 2024 |
| CVE-2024-24795 |
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious…
|
Not rated
|
Apr 4, 2024 |
| CVE-2023-38709 |
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP…
|
Not rated
|
Apr 4, 2024 |
| CVE-2023-31122 |
Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through…
|
Not rated
|
Oct 23, 2023 |
| CVE-2023-43622 |
An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection…
|
Not rated
|
Oct 23, 2023 |
| CVE-2023-45802 |
When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were…
|
Not rated
|
Oct 23, 2023 |