| CVE-2021-34798 |
Malformed requests may cause the server to dereference a NULL pointer
|
Not rated
|
Sep 16, 2021 |
| CVE-2021-33193 |
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request…
|
Not rated
|
Aug 16, 2021 |
| CVE-2021-31618 |
Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations…
|
Not rated
|
Jun 15, 2021 |
| CVE-2021-30641 |
Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
|
Not rated
|
Jun 10, 2021 |
| CVE-2021-26691 |
In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause…
|
Not rated
|
Jun 10, 2021 |
| CVE-2021-26690 |
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL…
|
Not rated
|
Jun 10, 2021 |
| CVE-2020-35452 |
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in…
|
Not rated
|
Jun 10, 2021 |
| CVE-2020-13950 |
Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with…
|
Not rated
|
Jun 10, 2021 |
| CVE-2020-13938 |
Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows
|
Not rated
|
Jun 10, 2021 |
| CVE-2019-17567 |
Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded…
|
Not rated
|
Jun 10, 2021 |
| CVE-2019-0197 |
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38
|
Not rated
|
Jun 11, 2019 |
| CVE-2019-0196 |
A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38
|
Not rated
|
Jun 11, 2019 |
| CVE-2019-0220 |
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38
|
Not rated
|
Jun 11, 2019 |
| CVE-2019-0190 |
A bug exists in the way mod_ssl handled client renegotiations
|
Not rated
|
Jan 30, 2019 |
| CVE-2018-17199 |
In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the…
|
Not rated
|
Jan 30, 2019 |
| CVE-2018-17189 |
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the…
|
Not rated
|
Jan 30, 2019 |
| CVE-2018-11763 |
In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection,…
|
Not rated
|
Sep 25, 2018 |
| CVE-2016-4975 |
Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir
|
Not rated
|
Aug 14, 2018 |
| CVE-2018-8011 |
By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child…
|
Not rated
|
Jul 18, 2018 |
| CVE-2018-1333 |
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker…
|
Not rated
|
Jun 18, 2018 |
| CVE-2018-1303 |
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an…
|
Not rated
|
Mar 26, 2018 |
| CVE-2018-1312 |
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent…
|
Not rated
|
Mar 26, 2018 |
| CVE-2018-1302 |
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have…
|
Not rated
|
Mar 26, 2018 |
| CVE-2018-1301 |
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound…
|
Not rated
|
Mar 26, 2018 |
| CVE-2018-1283 |
In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications…
|
Not rated
|
Mar 26, 2018 |