apache2

45 results · Clear filters · Feed

• High 7.5
  CVE-2023-27522

  Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

  HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine PyPI
  Mar 7, 2023
• High 7.5
  CVE-2021-41773 Exploited · Ransomware Public exploit EPSS 100%

  Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

  A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
  Oct 5, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-9517 EPSS 27%

  Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer…

  apache2 apache2 apache2 nodejs Debian Ubuntu Alpine
  Aug 13, 2019
• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2004-0747

  Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that cau…

  apache2 Debian
  Sep 17, 2004