| CVE-2026-63686 |
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-93546 |
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-79768 |
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-73637 |
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-73636 |
Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-63718 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-63292 |
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-63045 |
Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-59797 |
Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions
|
Non notée
|
1 oct. 2026 |
| CVE-2026-59685 |
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-58415 |
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-57941 |
Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-56449 |
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies
|
Non notée
|
1 oct. 2026 |
| CVE-2026-56154 |
Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-56153 |
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite
|
Non notée
|
1 oct. 2026 |
| CVE-2026-48005 |
Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-47360 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-46729 |
NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener
|
Non notée
|
1 oct. 2026 |
| CVE-2026-42356 |
Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-42528 |
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create…
|
Non notée
|
1 oct. 2026 |
| CVE-2026-49975 |
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service…
|
Non notée
|
8 juin 2026 |
| CVE-2026-48913 |
Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted
|
Non notée
|
8 juin 2026 |
| CVE-2026-42536 |
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content…
|
Non notée
|
8 juin 2026 |
| CVE-2026-44185 |
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server…
|
Non notée
|
8 juin 2026 |
| CVE-2026-34355 |
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend
|
Non notée
|
8 juin 2026 |