apache2 vulnerabilities (Debian)
274 vulnerabilities.
apache2DebianThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...7.5 Highapache2DebianThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 Highapache2DebianThe Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not...7.5 Highapache2DebianThe Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of...5.9 Mediumapache2Debianapache2 - regression updateNo scoreapache2DebianThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Mediumapache2DebianThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Mediumapache2DebianThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...5.0 Mediumapache2Debianmod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...4.3 Mediumapache2DebianThe handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP...5.0 Mediumapache2DebianThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 Mediumapache2DebianThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...4.3 Mediumapache2DebianThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumapache2DebianRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumapache2DebianThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumapache2DebianThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...4.3 Mediumapache2DebianThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...5.0 Mediumapache2DebianThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...5.0 Mediumapache2DebianThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...5.0 Mediumapache2Debianmod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds...7.5 Highapache2Debianmod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...4.3 Mediumapache2Debianmod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...5.1 Mediumapache2DebianThe Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy...4.6 Mediumapache2DebianMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...4.3 Mediumapache2DebianMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...4.3 Mediumapache2DebianThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 Mediumapache2DebianThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...2.6 Lowapache2DebianMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 Lowapache2DebianThe default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6...4.4 Mediumapache2Debianprotocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header...4.3 Mediumapache2DebianThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...2.6 Lowapache2Debianscoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a...4.6 Mediumapache2DebianThe Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon...5.0 Mediumapache2DebianThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...4.3 Mediumapache2DebianThe mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when...4.3 Mediumapache2DebianThe ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x...1.2 Lowapache2DebianInteger overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x...4.4 Mediumapache2DebianThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...5.0 Mediumapache2DebianThe mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with...4.3 Mediumapache2DebianThe byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2...7.8 Highapache2DebianThe configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2...4.3 Mediumapache2DebianMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...5.0 Mediumapache2Debianmod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend...5.0 Mediumapache2DebianThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 Mediumapache2DebianThe ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...4.3 Mediumapache2DebianThe ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2...5.0 Mediumapache2DebianThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows...2.6 Lowapache2DebianThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a...4.3 Mediumapache2DebianApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 Mediumapache2DebianThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 Medium- Show moreLoading…