Skip to contentApache Software Foundation Http Server vulnerabilities
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Fix availableEPSS 46.2%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreNULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Fix availableEPSS 52.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641Fix availableEPSS 51.8%5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflowCVE-2021-26691Fix availableEPSS 68.1%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereferenceCVE-2021-26690Public exploitFix availableEPSS 65.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byteCVE-2020-35452Fix availableEPSS 53.2%7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereferenceCVE-2020-13950Fix availableEPSS 50.0%7.5 High
- apache http server, mcafee epolicy orchestrator, netapp cloud backup +2 moreImproper Handling of Insufficient PrivilegesCVE-2020-13938Fix availableEPSS 11.8%5.5 Medium
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connectionsCVE-2019-17567Fix availableEPSS 59.7%5.3 Medium
- apache http serverIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...CVE-2020-11985Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- apache http server, oracle communications element manager, communications session report manager +4 more +6 moreIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...CVE-2019-10097Fix availableEPSS 52.9%7.2 High
- apache http server, debian linux +1 moreHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...CVE-2019-10081Fix availableEPSS 14.0%7.5 High
- apache http serverIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...CVE-2019-10098Public exploitFix availableEPSS 74.0%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache http server, oracle communications element manager, enterprise manager ops center +2 more +4 moreIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...CVE-2019-10082Fix availableEPSS 16.5%9.1 Critical
- apache http server, fedoraproject fedora +1 moreIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...CVE-2019-0215Fix availableEPSS 10.4%7.5 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- apache http server, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...CVE-2019-0196Fix availableEPSS 19.3%5.3 Medium
- apache http server, oracle enterprise manager ops center, hospitality guest access +2 more +4 moreA bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a...CVE-2019-0190Fix availableEPSS 59.9%7.5 High
- apache http server, canonical ubuntu linux, debian linux +9 more +11 moreIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...CVE-2018-17189Fix availableEPSS 19.4%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +3 more +5 moreIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...CVE-2018-17199Fix availableEPSS 20.0%7.5 High
- apache http server, canonical ubuntu linux, netapp storage automation store +6 more +8 moreIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...CVE-2018-11763Fix availableEPSS 51.0%5.9 Medium
- apache http servermod_userdir CRLF injectionCVE-2016-4975Fix availableEPSS 19.9%6.1 Medium
- apache http server, netapp cloud backup +1 moremod_md, DoS via Coredumps on specially crafted requestsCVE-2018-8011Fix availableEPSS 55.3%7.5 High
- apache http server, canonical ubuntu linux, netapp cloud backup +2 more +4 moreDoS for HTTP/2 connections by crafted requestsCVE-2018-1333Fix availableEPSS 17.0%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +4 more +6 moreA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...CVE-2018-1303Fix availableEPSS 69.8%7.5 High
- apache http server, canonical ubuntu linux, netapp clustered data ontap +3 more +5 moreWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...CVE-2018-1302Fix availableEPSS 12.9%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...CVE-2018-1283Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- apache http server, debian linux +1 moreApache httpd allows remote attackers to read secret data from process memory if the Limit...CVE-2017-9798Public exploitFix availableEPSS 94.7%7.5 High
- apache http serverA maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4...CVE-2017-7659Fix availableEPSS 53.9%7.5 High
- apache http serverWhen under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26...CVE-2017-9789Fix available7.5 High
- apache http server, apple mac os x, debian linux +12 more +14 moreIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...CVE-2017-9788Fix availableEPSS 56.8%9.1 Critical
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...CVE-2017-7679Public exploitFix availableEPSS 39.3%9.8 Critical
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...CVE-2017-7668Fix availableEPSS 57.5%7.5 High
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...CVE-2017-3169Fix availableEPSS 20.0%9.8 Critical
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...CVE-2017-3167Fix availableEPSS 20.2%9.8 Critical
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- Show moreLoading…