You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.60 Released - posted by covener <co...@apache.org> on 2024/07/01 12:33:13 UTC, 0 replies.
- CVE-2024-36387: Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:40:54 UTC, 0 replies.
- CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:41:15 UTC, 0 replies.
- CVE-2024-38473: Apache HTTP Server proxy encoding problem - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:41:26 UTC, 0 replies.
- CVE-2024-38474: Apache HTTP Server weakness with encoded question marks in backreferences - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:41:40 UTC, 0 replies.
- CVE-2024-38475: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:42:10 UTC, 0 replies.
- CVE-2024-38476: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:42:30 UTC, 0 replies.
- CVE-2024-38477: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:42:46 UTC, 0 replies.
- CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy handler substitution - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:43:00 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.61 Released - posted by covener <co...@apache.org> on 2024/07/03 15:07:21 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.62 Released - posted by covener <co...@apache.org> on 2024/07/17 18:21:31 UTC, 0 replies.
- CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType - posted by Eric Covener <co...@apache.org> on 2024/07/17 18:23:15 UTC, 0 replies.
- CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows - posted by Eric Covener <co...@apache.org> on 2024/07/17 18:25:03 UTC, 0 replies.