Archive
18 July 2024
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 5.3CVE-2024-40725 Public exploit
Apache HTTP Server: source code disclosure with handlers configured via AddType
A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result …
-
Medium 6.1CVE-2024-39090 Public exploit
The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forge…