Количество 44
Количество 44
BDU:2025-15636
Уязвимость модуля mod_md веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260122-73-0024
Уязвимость httpd
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-58098
Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) ...
GHSA-4m29-g52g-c6qc
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
ELSA-2026-0075
ELSA-2026-0075: httpd security update (IMPORTANT)
BDU:2025-15635
Уязвимость модуля mod_cgid веб-сервера Apache HTTP Server, позволяющая нарушителю выполнить произвольный код
ROS-20260122-73-0025
Уязвимость httpd
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-66200
Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in ...
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
CVE-2025-65082
Apache HTTP Server: CGI environment variable override
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ...
GHSA-768g-4qpg-32w7
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
GHSA-3j3g-3pw9-9vcc
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-15636 Уязвимость модуля mod_md веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | ROS-20260122-73-0024 Уязвимость httpd | CVSS3: 7.5 | 0% Низкий | 15 дней назад |
 | CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 8.3 | 0% Низкий | 2 месяца назад |
 | CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 8.3 | 0% Низкий | 2 месяца назад |
 | CVE-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | CVSS3: 8.3 | 0% Низкий | около 2 месяцев назад |
| CVE-2025-58098 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) ... | CVSS3: 8.3 | 0% Низкий | 2 месяца назад |
| GHSA-4m29-g52g-c6qc Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 8.3 | 0% Низкий | 2 месяца назад |
| ELSA-2026-0075 ELSA-2026-0075: httpd security update (IMPORTANT) | 28 дней назад | ||
| BDU:2025-15635 Уязвимость модуля mod_cgid веб-сервера Apache HTTP Server, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260122-73-0025 Уязвимость httpd | CVSS3: 8.3 | 0% Низкий | 15 дней назад |
| CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
| CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
| CVE-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | CVSS3: 5.4 | 0% Низкий | около 2 месяцев назад |
| CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in ... | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
| CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2025-65082 Apache HTTP Server: CGI environment variable override | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ... | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| GHSA-768g-4qpg-32w7 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| GHSA-3j3g-3pw9-9vcc mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу