Поиск уязвимостей
Количество 19
Количество 19
BDU:2024-06593
Уязвимость функции mod_rewrite веб-сервера Apache HTTP Server, позволяющая нарушителю выполнить произвольный код
ROS-20241203-19
Множественные уязвимости httpd
ALT-PU-2024-10005
ALT-PU-2024-10005: package `apache2` update to version 2.4.61-alt1
CVE-2024-38474
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified.
CVE-2024-38474
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified.
CVE-2024-38474
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified.
CVE-2024-38474
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.5 ...
GHSA-x6g9-g4wf-qrf7
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified.
SUSE-SU-2024:2999-1
Security update for apache2
SUSE-SU-2024:2997-1
Security update for apache2
SUSE-SU-2024:3173-1
Security update for apache2
SUSE-SU-2024:3172-1
Security update for apache2
ELSA-2024-4943
ELSA-2024-4943: httpd security update (IMPORTANT)
RLSA-2024:4726
Important: httpd security update
RLSA-2024:4720
Important: httpd:2.4 security update
ELSA-2024-4726
ELSA-2024-4726: httpd security update (IMPORTANT)
ELSA-2024-4720
ELSA-2024-4720: httpd:2.4 security update (IMPORTANT)
ALT-PU-2024-9738
ALT-PU-2024-9738: package `apache2` update to version 2.4.61-alt1
SUSE-SU-2026:2686-1
Security update for apache2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-06593 Уязвимость функции mod_rewrite веб-сервера Apache HTTP Server, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
 | ROS-20241203-19 Множественные уязвимости httpd | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-10005 ALT-PU-2024-10005: package `apache2` update to version 2.4.61-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
 | CVE-2024-38474 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-38474 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-38474 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
| CVE-2024-38474 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.5 ... | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
| GHSA-x6g9-g4wf-qrf7 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:2999-1 Security update for apache2 | около 2 лет назад | ||
| SUSE-SU-2024:2997-1 Security update for apache2 | около 2 лет назад | ||
| SUSE-SU-2024:3173-1 Security update for apache2 | около 2 лет назад | ||
| SUSE-SU-2024:3172-1 Security update for apache2 | около 2 лет назад | ||
| ELSA-2024-4943 ELSA-2024-4943: httpd security update (IMPORTANT) | около 2 лет назад | ||
 | RLSA-2024:4726 Important: httpd security update | больше 2 лет назад | ||
| RLSA-2024:4720 Important: httpd:2.4 security update | больше 1 года назад | ||
| ELSA-2024-4726 ELSA-2024-4726: httpd security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-4720 ELSA-2024-4720: httpd:2.4 security update (IMPORTANT) | больше 2 лет назад | ||
| ALT-PU-2024-9738 ALT-PU-2024-9738: package `apache2` update to version 2.4.61-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
| SUSE-SU-2026:2686-1 Security update for apache2 | 4 месяца назад |
Уязвимостей на страницу