httpd vulnerabilities (Red Hat)
274 vulnerabilities.
httpdRed Hatmod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend...5.0 MediumhttpdRed HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 MediumhttpdRed HatApache MyFaces Cross-site Scripting vulnerability4.0 MediumhttpdRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 LowhttpdRed HatThe ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...4.3 MediumhttpdRed HatThe ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2...5.0 MediumhttpdRed HatImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat4.3 MediumhttpdRed HatApache Tomcat Directory Traversal vulnerability5.8 MediumhttpdRed HatApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 MediumhttpdRed HatThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...6.8 MediumhttpdRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...6.5 MediumhttpdRed HatThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...4.0 MediumhttpdRed HatThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...5.0 MediumhttpdRed HatThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...2.6 LowhttpdRed HatMultiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...10.0 HighhttpdRed HatThe exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...4.3 MediumhttpdRed HatMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...8.5 HighhttpdRed HatThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...7.1 HighhttpdRed HatThe stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...7.1 HighhttpdRed HatOff-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big...6.4 MediumhttpdRed HatThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...7.5 HighhttpdRed HatThe apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5...4.3 MediumhttpdRed HatThe Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options...4.9 MediumhttpdRed HatMemory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...5.0 MediumhttpdRed HatHeap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl...7.5 HighhttpdRed Hatmod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote...5.0 MediumhttpdRed HatPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...4.0 MediumhttpdRed HatCross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0...2.6 LowhttpdRed HatMySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...4.6 MediumhttpdRed HatMySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' ...4.0 MediumhttpdRed HatCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...4.3 MediumhttpdRed HatThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...5.0 MediumhttpdRed HatMemory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9...5.0 MediumhttpdRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 CriticalhttpdRed HatThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit...7.5 HighhttpdRed HatThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 HighhttpdRed HatThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 CriticalhttpdRed HatMySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5...4.6 MediumhttpdRed HatCRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and...2.6 LowhttpdRed HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 MediumhttpdRed Hatmod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...4.3 MediumhttpdRed HatCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...4.3 MediumhttpdRed HatCross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache...3.5 LowhttpdRed HatThe balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6...4.0 MediumhttpdRed HatCross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...4.3 MediumhttpdRed HatCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...4.3 MediumhttpdRed HatThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 MediumhttpdRed HatThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 MediumhttpdRed HatCross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...4.3 MediumhttpdRed HatPHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...5.0 Medium- Show moreLoading…