Поиск уязвимостей
Количество 56
Количество 56
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-66200
Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
CVE-2025-66200
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in ...
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
CVE-2025-65082
Apache HTTP Server: CGI environment variable override
CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ...
ROS-20260122-80-0027
Уязвимость httpd
ROS-20260122-80-0026
Уязвимость httpd
GHSA-768g-4qpg-32w7
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.
GHSA-3j3g-3pw9-9vcc
mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
BDU:2025-15638
Уязвимость модуля mod_userdir веб-сервера Apache HTTP Server, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
BDU:2025-15637
Уязвимость веб-сервера Apache HTTP Server, связанная с непринятием мер по нейтрализации специальных управляющих элементов, позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации
ROS-20260122-73-0028
Уязвимость httpd
ROS-20260122-73-0027
Уязвимость httpd
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 1% Низкий | 11 месяцев назад |
 | CVE-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | CVSS3: 5.4 | 1% Низкий | 11 месяцев назад |
| CVE-2025-66200 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in ... | CVSS3: 5.4 | 1% Низкий | 11 месяцев назад |
 | CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 1% Низкий | 11 месяцев назад |
 | CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 1% Низкий | 11 месяцев назад |
| CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 1% Низкий | 11 месяцев назад |
| CVE-2025-65082 Apache HTTP Server: CGI environment variable override | CVSS3: 6.5 | 1% Низкий | 11 месяцев назад |
| CVE-2025-65082 Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ... | CVSS3: 6.5 | 1% Низкий | 11 месяцев назад |
 | ROS-20260122-80-0027 Уязвимость httpd | CVSS3: 5.4 | 1% Низкий | 10 месяцев назад |
| ROS-20260122-80-0026 Уязвимость httpd | CVSS3: 6.5 | 1% Низкий | 10 месяцев назад |
| GHSA-768g-4qpg-32w7 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. | CVSS3: 6.5 | 1% Низкий | 11 месяцев назад |
| GHSA-3j3g-3pw9-9vcc mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 5.4 | 1% Низкий | 11 месяцев назад |
 | BDU:2025-15638 Уязвимость модуля mod_userdir веб-сервера Apache HTTP Server, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код | CVSS3: 5.4 | 1% Низкий | 12 месяцев назад |
| BDU:2025-15637 Уязвимость веб-сервера Apache HTTP Server, связанная с непринятием мер по нейтрализации специальных управляющих элементов, позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации | CVSS3: 6.5 | 1% Низкий | 12 месяцев назад |
| ROS-20260122-73-0028 Уязвимость httpd | CVSS3: 5.4 | 1% Низкий | 10 месяцев назад |
| ROS-20260122-73-0027 Уязвимость httpd | CVSS3: 6.5 | 1% Низкий | 10 месяцев назад |
Уязвимостей на страницу