Поиск уязвимостей
Количество 56
Количество 56
ROS-20260122-80-0023
Уязвимость httpd
RLSA-2025:23739
Important: mod_md security update
RLSA-2025:23738
Important: mod_md security update
GHSA-3j5h-f552-7rhh
An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
ELSA-2025-23739
ELSA-2025-23739: mod_md security update (IMPORTANT)
ELSA-2025-23738
ELSA-2025-23738: mod_md security update (IMPORTANT)
BDU:2025-15636
Уязвимость модуля mod_md веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260122-73-0024
Уязвимость httpd
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-58098
Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) ...
ROS-20260122-80-0024
Уязвимость httpd
GHSA-4m29-g52g-c6qc
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
ELSA-2026-0075
ELSA-2026-0075: httpd security update (IMPORTANT)
BDU:2025-15635
Уязвимость модуля mod_cgid веб-сервера Apache HTTP Server, позволяющая нарушителю выполнить произвольный код
ROS-20260122-73-0025
Уязвимость httpd
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20260122-80-0023 Уязвимость httpd | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
 | RLSA-2025:23739 Important: mod_md security update | 0% Низкий | 11 месяцев назад | |
| RLSA-2025:23738 Important: mod_md security update | 0% Низкий | 11 месяцев назад | |
| GHSA-3j5h-f552-7rhh An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 7.5 | 0% Низкий | 11 месяцев назад |
| ELSA-2025-23739 ELSA-2025-23739: mod_md security update (IMPORTANT) | 0% Низкий | 11 месяцев назад | |
| ELSA-2025-23738 ELSA-2025-23738: mod_md security update (IMPORTANT) | 0% Низкий | 11 месяцев назад | |
 | BDU:2025-15636 Уязвимость модуля mod_md веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | около 1 года назад |
| ROS-20260122-73-0024 Уязвимость httpd | CVSS3: 7.5 | 0% Низкий | 10 месяцев назад |
 | CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 8.3 | 2% Низкий | 11 месяцев назад |
 | CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 7.1 | 2% Низкий | 11 месяцев назад |
 | CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 8.3 | 2% Низкий | 11 месяцев назад |
 | CVE-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | CVSS3: 8.3 | 2% Низкий | 11 месяцев назад |
| CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) ... | CVSS3: 8.3 | 2% Низкий | 11 месяцев назад |
| ROS-20260122-80-0024 Уязвимость httpd | CVSS3: 8.3 | 2% Низкий | 10 месяцев назад |
| GHSA-4m29-g52g-c6qc Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 8.3 | 2% Низкий | 11 месяцев назад |
| ELSA-2026-0075 ELSA-2026-0075: httpd security update (IMPORTANT) | 2% Низкий | 10 месяцев назад | |
| BDU:2025-15635 Уязвимость модуля mod_cgid веб-сервера Apache HTTP Server, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.3 | 2% Низкий | около 1 года назад |
| ROS-20260122-73-0025 Уязвимость httpd | CVSS3: 8.3 | 2% Низкий | 10 месяцев назад |
| CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 1% Низкий | 11 месяцев назад |
| CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 1% Низкий | 11 месяцев назад |
Уязвимостей на страницу