|
41
|
7.5
5.0
|
HIGH
Network
|
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.
|
CWE-665
Improper Initialization
|
CVE-2022-22719
|
cpe:2.3:a:apache:http_server:*:*
|
|
2.4.52
|
|
|
2024-11-21 15:47
2022-03-14
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
42
|
9.8
7.5
|
CRITICAL
Network
|
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerab…
|
-
|
CVE-2021-44790
|
cpe:2.3:a:apache:http_server:*:*
|
|
2.4.51
|
|
|
2024-11-21 15:31
2021-12-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
43
|
8.2
6.4
|
HIGH
Network
|
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can all…
|
CWE-476
NULL Pointer Dereference
|
CVE-2021-44224
|
cpe:2.3:a:apache:http_server:*:*
|
2.4.7
|
|
|
2.4.52
|
2024-11-21 15:30
2021-12-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
44
|
9.8
7.5
|
CRITICAL
Network
|
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Al…
|
CWE-22
NVD-CWE-Other
Path Traversal
|
CVE-2021-42013
|
cpe:2.3:a:apache:http_server:2.4.50:*
cpe:2.3:a:apache:http_server:2.4.49:*
|
|
|
|
|
2024-11-21 15:27
2021-10-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
45
|
7.5
4.3
|
HIGH
Network
|
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-li…
|
CWE-22
Path Traversal
|
CVE-2021-41773
|
cpe:2.3:a:apache:http_server:2.4.49:*
|
|
|
|
|
2024-11-21 15:26
2021-10-5
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
46
|
7.5
5.0
|
HIGH
Network
|
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request.…
|
CWE-476
NULL Pointer Dereference
|
CVE-2021-41524
|
cpe:2.3:a:apache:http_server:2.4.49:*
|
|
|
|
|
2024-11-21 15:26
2021-10-5
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
47
|
9.8
7.5
|
CRITICAL
Network
|
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affe…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-39275
|
cpe:2.3:a:apache:http_server:*:*
|
|
2.4.48
|
|
|
2024-11-21 15:19
2021-09-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
48
|
9.0
6.8
|
CRITICAL
Network
|
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2021-40438
|
cpe:2.3:a:apache:http_server:*:*
|
|
2.4.48
|
|
|
2024-11-21 15:24
2021-09-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
49
|
7.5
5.0
|
HIGH
Network
|
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
|
CWE-125
Out-of-bounds Read
|
CVE-2021-36160
|
cpe:2.3:a:apache:http_server:*:*
|
2.4.30
|
2.4.48
|
|
|
2024-11-21 15:13
2021-09-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
50
|
7.5
5.0
|
HIGH
Network
|
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
|
CWE-476
NULL Pointer Dereference
|
CVE-2021-34798
|
cpe:2.3:a:apache:http_server:*:*
|
|
2.4.48
|
|
|
2024-11-21 15:11
2021-09-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|