httpd-debuginfo vulnerabilities (Red Hat)
250 vulnerabilities.
httpd-debuginfoRed HatUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 Highhttpd-debuginfoRed HatWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highhttpd-debuginfoRed HatApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 Highhttpd-debuginfoRed HatIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 Criticalhttpd-debuginfoRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Criticalhttpd-debuginfoRed HatThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 Highhttpd-debuginfoRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Criticalhttpd-debuginfoRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Criticalhttpd-debuginfoRed HatStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.7.5 Highhttpd-debuginfoRed HatApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 Highhttpd-debuginfoRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 Highhttpd-debuginfoRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 Highhttpd-debuginfoRed Hatmod_cluster Denial of Service vulnerability7.5 Highhttpd-debuginfoRed HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 Highhttpd-debuginfoRed HatThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 Highhttpd-debuginfoRed HatInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 Highhttpd-debuginfoRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 Highhttpd-debuginfoRed HatCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 Mediumhttpd-debuginfoRed HatThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...6.0 Mediumhttpd-debuginfoRed HatThe Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an...6.0 Mediumhttpd-debuginfoRed HatThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Mediumhttpd-debuginfoRed HatThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Mediumhttpd-debuginfoRed HatApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 Mediumhttpd-debuginfoRed HatThe default configuration for the Command Line Interface in Red Hat Enterprise Application...2.1 Lowhttpd-debuginfoRed HatImproper Access Control in Apache WSS4J5.0 Mediumhttpd-debuginfoRed HatThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 Mediumhttpd-debuginfoRed HatThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...4.9 Mediumhttpd-debuginfoRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumhttpd-debuginfoRed HatThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...4.3 Mediumhttpd-debuginfoRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumhttpd-debuginfoRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumhttpd-debuginfoRed HatThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumhttpd-debuginfoRed HatThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...4.3 Mediumhttpd-debuginfoRed HatMissing XML Validation in Apache Tomcat4.3 Mediumhttpd-debuginfoRed HatNetty denial of service vulnerability5.0 Mediumhttpd-debuginfoRed HatThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...5.0 Mediumhttpd-debuginfoRed HatThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...5.0 Mediumhttpd-debuginfoRed HatThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...5.0 Mediumhttpd-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Mediumhttpd-debuginfoRed HatRed Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0...3.7 Lowhttpd-debuginfoRed HatThe org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and...4.3 Mediumhttpd-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in JGroup5.4 Mediumhttpd-debuginfoRed HatPicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local...1.9 Lowhttpd-debuginfoRed HatInefficient Algorithmic Complexity in Apache Santuario XML Security4.3 Mediumhttpd-debuginfoRed HatInadequate Encryption Strength in Apache CXF6.4 Mediumhttpd-debuginfoRed HatImproper Input Validation in Apache Tomcat6.4 Mediumhttpd-debuginfoRed Hatmod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...4.3 Mediumhttpd-debuginfoRed Hatmod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...5.1 Mediumhttpd-debuginfoRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Lowhttpd-debuginfoRed HatImproper Authentication in Apache Tomcat6.8 Medium- Show moreLoading…