Apache HTTP Server

SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.

mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.

Information Disclosure in mod_lua with websockets

Apache HTTP Server: HTTP/2 DoS by Memory Increase

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.

Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.

Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request

Apache HTTP Server: mod_macro buffer over-read

Format string bug in the Redis cache implementation

Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header.

Apache HTTP Server: mod_proxy_http2 denial of service

Apache HTTP Server: SSRF on Windows due to UNC paths

Apache HTTP Server: mod_proxy_html buffer overflow

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_vhost_alias stack overflow

Apache HTTP Server: SSRF with mod_headers setting Content-Type header

Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

Apache HTTP Server: HTTP response splitting

Apache HTTP Server: mod_ssl error log variable escaping

Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

Apache HTTP Server: mod_dav_lock indirect lock crash

Apache HTTP Server: mod_proxy_html: crash in dump_content

Apache HTTP Server: mod_auth_digest reauthentication attack

Apache HTTP Server: mod_md (ACME), unintended retry intervals

Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char

Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM

Apache HTTP Server: mod_xml2enc crash on charset conversion failure

Apache HTTP Server: mod_heartmonitor denial of service

Apache HTTP Server: mod_proxy_ftp PASV address handling

Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

Apache HTTP Server: mod_session: Session cookie not removed during internal redirect

Apache HTTP Server: mod_ssl TLS upgrade attack

mod_auth_digest possible stack overflow by one nul byte

Apache HTTP Server: HTTP response splitting

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`