Apache HTTP Server any version

Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."

Denial of service in mod_lua r:parsebody

Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.

SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.

mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.

Information Disclosure in mod_lua with websockets

Apache HTTP Server: HTTP/2 DoS by Memory Increase

Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request

Apache HTTP Server: mod_macro buffer over-read

Format string bug in the Redis cache implementation

Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

Apache HTTP Server: mod_proxy_http2 denial of service

Apache HTTP Server: SSRF on Windows due to UNC paths

Apache HTTP Server: mod_proxy_html buffer overflow

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_vhost_alias stack overflow

Apache HTTP Server: SSRF with mod_headers setting Content-Type header

Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

Apache HTTP Server: HTTP response splitting

Apache HTTP Server: mod_ssl error log variable escaping

Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

Apache HTTP Server: mod_dav_lock indirect lock crash

Apache HTTP Server: mod_proxy_html: crash in dump_content

Apache HTTP Server: mod_auth_digest reauthentication attack

Apache HTTP Server: mod_md (ACME), unintended retry intervals

Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char

Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM

Apache HTTP Server: mod_xml2enc crash on charset conversion failure

Apache HTTP Server: mod_heartmonitor denial of service

Apache HTTP Server: mod_proxy_ftp PASV address handling

Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

Apache HTTP Server: mod_session: Session cookie not removed during internal redirect

Apache HTTP Server: mod_ssl TLS upgrade attack

mod_auth_digest possible stack overflow by one nul byte

Apache HTTP Server: HTTP response splitting

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`