Security
فارسی
All products

Red Hat JBoss Core Services/jbcs-httpd24-httpd

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost contextCVE-2024-40898 Red Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: SSRF in Apache HTTP Server on WindowsCVE-2024-38472 Red Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: httpd: Denial of Service via mod_dav shared lock memory calculation errorCVE-2026-42528 Red Hat Enterprise Linux 10/httpdRed Hat Enterprise Linux 6/httpd Red Hat Medium No fix reported
httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirectsCVE-2026-42356 Red Hat Enterprise Linux 10/httpdRed Hat Enterprise Linux 9/httpd Red Hat Low No fix reported
httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereferenceCVE-2026-46729 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: httpd: Information disclosure via session cookie leakage during internal redirectsCVE-2026-47360 Red Hat Enterprise Linux 10/httpdRed Hat Enterprise Linux 7/httpd Red Hat Low No fix reported
httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digestCVE-2026-48005 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat Low No fix reported
httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_liteCVE-2026-56153 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: httpd: Denial of Service via mod_rewrite lookaheadCVE-2026-56154 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat High No fix reported
httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_htmlCVE-2026-56449 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat Low No fix reported
httpd: httpd: Information disclosure via direct request to the WebDAV state directoryCVE-2026-58415 Red Hat Enterprise Linux 10/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported
httpd: httpd: Denial of Service via out-of-bounds write during Windows path expansionCVE-2026-59685 Red Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-functionCVE-2026-59797 Red Hat Enterprise Linux 10/httpdRed Hat Enterprise Linux 6/httpd Red Hat Medium No fix reported
httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV responseCVE-2026-63045 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat Medium No fix reported
httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_aliasCVE-2026-63292 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgiCVE-2026-63718 Red Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: httpd: Authentication bypass via credential replay in mod_auth_digestCVE-2026-73636 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat High No fix reported
httpd: httpd: Authentication state corruption via concurrent Digest authentication requestsCVE-2026-73637 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Core Services/jbcs-httpd24-httpd Red Hat Medium No fix reported
httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalenceCVE-2026-79768 Red Hat Enterprise Linux 10/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported
httpd: httpd: Denial of Service via integer overflow in mod_dav_fsCVE-2026-93546 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported