| CVE-2026-24033 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server
|
7.2
Élevée
|
29 juil. 2026 |
| CVE-2026-33267 |
Improper Input Validation vulnerability in Apache Traffic Server
|
10.0
Critique
|
29 juil. 2026 |
| CVE-2026-22068 |
Regular Expression without Anchors vulnerability in Apache Traffic Server
|
8.2
Élevée
|
29 juil. 2026 |
| CVE-2026-41920 |
Improper Access Control vulnerability in Apache Traffic Server
|
9.3
Critique
|
29 juil. 2026 |
| CVE-2026-59173 |
Uncontrolled Resource Consumption vulnerability in Apache Traffic Server
|
Non notée
|
18 juil. 2026 |
| CVE-2025-65114 |
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic…
|
Non notée
|
2 avr. 2026 |
| CVE-2025-58136 |
A bug in POST request handling causes a crash under a certain condition
|
Non notée
|
2 avr. 2026 |
| CVE-2025-31698 |
ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol
|
Non notée
|
19 juin 2025 |
| CVE-2025-49763 |
ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if…
|
Non notée
|
19 juin 2025 |
| CVE-2024-53868 |
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic…
|
Non notée
|
3 avr. 2025 |
| CVE-2024-38311 |
Improper Input Validation vulnerability in Apache Traffic Server
|
Non notée
|
6 mars 2025 |
| CVE-2024-56195 |
Improper Access Control vulnerability in Apache Traffic Server
|
Non notée
|
6 mars 2025 |
| CVE-2024-56196 |
Improper Access Control vulnerability in Apache Traffic Server
|
Non notée
|
6 mars 2025 |
| CVE-2024-56202 |
Expected Behavior Violation vulnerability in Apache Traffic Server
|
Non notée
|
6 mars 2025 |
| CVE-2024-50306 |
Unchecked return value can allow Apache Traffic Server to retain privileges on startup
|
Non notée
|
14 nov. 2024 |
| CVE-2024-50305 |
Valid Host header field can cause Apache Traffic Server to crash on some platforms
|
Non notée
|
14 nov. 2024 |
| CVE-2024-38479 |
Improper Input Validation vulnerability in Apache Traffic Server
|
Non notée
|
14 nov. 2024 |
| CVE-2023-38522 |
Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to…
|
Non notée
|
26 juil. 2024 |
| CVE-2024-35296 |
Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests
|
Non notée
|
26 juil. 2024 |
| CVE-2024-35161 |
Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers
|
Non notée
|
26 juil. 2024 |
| CVE-2024-31309 |
HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from…
|
Non notée
|
10 avr. 2024 |
| CVE-2023-39456 |
Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-41752 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-33934 |
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache…
|
Non notée
|
9 août 2023 |
| CVE-2022-47185 |
Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This…
|
Non notée
|
9 août 2023 |