CVE search results

91 – 100 of 294 results

Detailed view

Sort by:

CVE-2020-11985

Low priority

Some fixes available 1 of 2

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note...

1 affected package

apache2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
apache2	Not affected	Not affected	Not affected	Not affected

CVE-2020-11984

Medium priority

Fixed

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

2 affected packages

apache2, uwsgi

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
apache2	—	Fixed	Fixed	Not affected
uwsgi	—	Not affected	Not affected	Fixed

CVE-2020-1927

Low priority

Some fixes available 3 of 5

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.

1 affected package

apache2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
apache2	Not affected	Not affected	Fixed	Fixed

CVE-2020-1934

Low priority

Some fixes available 3 of 5

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

1 affected package

apache2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
apache2	Not affected	Not affected	Fixed	Fixed

CVE-2019-20479

Medium priority

Not affected

A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning.

1 affected package

libapache2-mod-auth-openidc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libapache2-mod-auth-openidc	—	—	—	Not affected

CVE-2016-1000104

Medium priority

Vulnerable

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07.

1 affected package

libapache2-mod-fcgid

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libapache2-mod-fcgid	Vulnerable	Vulnerable	Vulnerable	Vulnerable

CVE-2019-14857

Medium priority

Needs evaluation

A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in mod_auth_mellon.

1 affected package

libapache2-mod-auth-openidc

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libapache2-mod-auth-openidc	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2013-1889

Medium priority

Ignored

mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.

1 affected package

libapache2-mod-ruid2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libapache2-mod-ruid2	—	—	—	—

CVE-2019-15903

Medium priority

Some fixes available 51 of 180

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a...

32 affected packages

apache2, apr-util, audacity, ayttm, cableswig...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
apache2	Not affected	Not affected	Not affected	Not affected
apr-util	Not affected	Not affected	Not affected	Not affected
audacity	Needs evaluation	Not affected	Not affected	Not affected
ayttm	Not in release	Not in release	Not in release	Not in release
cableswig	Not in release	Not in release	Not in release	Not in release
cadaver	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
chromium-browser	Fixed	Fixed	Fixed	Fixed
cmake	Not affected	Not affected	Not affected	Not affected
coin3	Not affected	Not affected	Not affected	Vulnerable
expat	Not affected	Not affected	Not affected	Fixed
firefox	Fixed	Fixed	Fixed	Fixed
gdcm	Not affected	Not affected	Not affected	Not affected
ghostscript	Not affected	Not affected	Not affected	Not affected
insighttoolkit	Not in release	Not in release	Not in release	Not in release
insighttoolkit4	Not in release	Not affected	Not affected	Not affected
kompozer	Not in release	Not in release	Not in release	Not in release
libparagui1.1	Not in release	Not in release	Not in release	Not in release
libxmltok	Vulnerable	Fixed	Fixed	Fixed
matanza	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
poco	Not affected	Not affected	Not affected	Not affected
simgear	Not affected	Not affected	Not affected	Not affected
sitecopy	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
smart	Not in release	Not in release	Not in release	Not affected
swish-e	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
tdom	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texlive-bin	Not affected	Not affected	Not affected	Not affected
thunderbird	Fixed	Fixed	Fixed	Fixed
vnc4	Not in release	Not in release	Not in release	Vulnerable
vtk	Not in release	Not in release	Not in release	Not in release
wbxml2	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
wxwidgets2.8	Not in release	Not in release	Not in release	Not in release
xmlrpc-c	Vulnerable	Vulnerable	Vulnerable	Vulnerable

CVE-2019-10081

Medium priority

Fixed

HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with “H2PushResource”, could lead to an overwrite of memory in the pushing request’s pool, leading to crashes. The memory copied is that of the configured...

1 affected package

apache2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
apache2	—	—	—	Fixed

Export to JSON

Results by page:

Search CVE reports