주요 제품 취약점 (33건)
"Apache HTTP" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Apache HTTP
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy P…
|
CVE-2026-21962 | 10.0 | CWE-284 | KEV | 2026-08-24 |
|
Apache HTTP
Ivanti Sentry
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentica…
|
CVE-2023-38035 | 9.8 | CWE-863 | KEV | 2023-08-22 |
|
Apache HTTP
SonicWall SMA 100 Appliances
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated atta…
|
CVE-2021-20038 | 9.8 | CWE-121 | KEV | 2022-01-28 |
|
Apache HTTP
GNU Bourne-Again Shell (Bash)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which…
|
CVE-2014-7169 | 9.8 | CWE-78 | KEV | 2022-01-28 |
|
Apache HTTP
GNU Bourne-Again Shell (Bash)
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to e…
|
CVE-2014-6271 | 9.8 | CWE-78 | KEV | 2022-01-28 |
|
Apache HTTP
Apache HTTP Server
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs…
|
CVE-2021-42013 | 9.8 | CWE-22 | KEV | 2021-11-03 |
|
Apache HTTP
Apache HTTP Server
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to fi…
|
CVE-2021-41773 | 9.8 | CWE-22 | KEV | 2021-11-03 |
|
Apache HTTP
Apache HTTP Server
Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are p…
|
CVE-2024-38475 | 9.1 | CWE-116 | KEV | 2025-05-01 |
|
Apache HTTP
Apache Apache
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP …
|
CVE-2021-40438 | 9.0 | CWE-918 | KEV | 2021-12-01 |
|
Apache HTTP
GNU GNU Bash
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to…
|
CVE-2014-6278 | 8.8 | CWE-78 | KEV | 2025-10-02 |
|
Apache HTTP
Apache HTTP Server
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads …
|
CVE-2019-0211 | 7.8 | CWE-416 | KEV | 2021-11-03 |
|
Apache HTTP
Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.
This issue affects Apache…
|
CVE-2026-59797 | 9.8 | CWE-269 | — | |
|
Apache HTTP
Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy
This issue affects Apache HTTP Server: from 2…
|
CVE-2026-57941 | 9.8 | CWE-416 | — | |
|
Apache HTTP
Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})
This issue affects Apache HTTP Server: fr…
|
CVE-2026-56154 | 9.8 | CWE-416 | — | |
|
Apache HTTP
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes…
|
CVE-2026-93546 | 8.8 | CWE-190 | — | |
|
Apache HTTP
MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL…
|
CVE-2026-93302 | 8.2 | CWE-295 | — | |
|
Apache HTTP
Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-th…
|
CVE-2026-73636 | 8.1 | CWE-294 | — | |
|
Apache HTTP
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy…
|
CVE-2026-63718 | 7.5 | CWE-444 | — | |
|
Apache HTTP
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend…
|
CVE-2026-63686 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote clien…
|
CVE-2026-63292 | 7.5 | CWE-121 | — | |
|
Apache HTTP
Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allow…
|
CVE-2026-63045 | 7.5 | CWE-284 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded.
This issue a…
|
CVE-2026-59685 | 7.5 | CWE-787 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.
This issue affects Apache HTTP Server:…
|
CVE-2026-56449 | 7.5 | CWE-787 | — | |
|
Apache HTTP
Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite.
This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
|
CVE-2026-56153 | 7.5 | CWE-787 | — | |
|
Apache HTTP
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.
T…
|
CVE-2026-49975 | 7.5 | CWE-789 | — | |
|
Apache HTTP
Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenti…
|
CVE-2026-48005 | 7.5 | CWE-306 | — | |
|
Apache HTTP
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module.
When SessionCookie…
|
CVE-2026-47360 | 7.5 | CWE-200 | — | |
|
Apache HTTP
NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener.
This issue affects Apache HTTP Server: from …
|
CVE-2026-46729 | 7.5 | CWE-476 | — | |
|
Apache HTTP
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote cl…
|
CVE-2026-73637 | 7.3 | CWE-416 | — | |
|
Apache HTTP
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard Us…
|
CVE-2026-79768 | 5.3 | CWE-55 | — | |
|
Apache HTTP
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms all…
|
CVE-2026-58415 | 5.3 | CWE-552 | — | |
|
Apache HTTP
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server chil…
|
CVE-2026-42528 | 4.3 | CWE-789 | — | |
|
Apache HTTP
Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as …
|
CVE-2026-42356 | 3.7 | CWE-430 | — |