| CVE-2023-27522 |
HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi
|
Not rated
|
Mar 7, 2023 |
| CVE-2023-25690 |
Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack
|
Not rated
|
Mar 7, 2023 |
| CVE-2022-37436 |
Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early,…
|
Not rated
|
Jan 17, 2023 |
| CVE-2022-36760 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP…
|
Not rated
|
Jan 17, 2023 |
| CVE-2006-20001 |
A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap)…
|
Not rated
|
Jan 17, 2023 |
| CVE-2022-31813 |
Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-30556 |
Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-30522 |
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-29404 |
In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-28615 |
Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match()…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-28614 |
The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-28330 |
Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-26377 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP…
|
Not rated
|
Jun 8, 2022 |
| CVE-2022-23943 |
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with…
|
Not rated
|
Mar 14, 2022 |
| CVE-2022-22721 |
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer…
|
Not rated
|
Mar 14, 2022 |
| CVE-2022-22720 |
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the…
|
Not rated
|
Mar 14, 2022 |
| CVE-2022-22719 |
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash
|
Not rated
|
Mar 14, 2022 |
| CVE-2021-44224 |
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer…
|
Not rated
|
Dec 20, 2021 |
| CVE-2021-44790 |
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called…
|
Not rated
|
Dec 20, 2021 |
| CVE-2021-42013 |
Exploited
Apache HTTP Server Path Traversal Vulnerability
|
Not rated
|
Oct 7, 2021 |
| CVE-2021-41773 |
Exploited
Apache HTTP Server Path Traversal Vulnerability
|
Not rated
|
Oct 5, 2021 |
| CVE-2021-41524 |
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing…
|
Not rated
|
Oct 5, 2021 |
| CVE-2021-40438 |
Exploited
Apache HTTP Server-Side Request Forgery (SSRF)
|
Not rated
|
Sep 16, 2021 |
| CVE-2021-39275 |
ap_escape_quotes() may write beyond the end of a buffer when given malicious input
|
Not rated
|
Sep 16, 2021 |
| CVE-2021-36160 |
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)
|
Not rated
|
Sep 16, 2021 |