Most recent entries from all

Withdrawn: BELL-CVE-2020-13938 — CVE-2020-13938 does not affect BellSoft software

2026-10-04T11:03:52.639310+00:00

Withdrawn by the publisher.

BIT-apache-2020-13938 — Improper Handling of Insufficient Privileges

2026-10-04T11:03:52.639349+00:00

Affected: Bitnami: apache

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

certfr-2024-avi-0575 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent…

2026-10-04T11:03:52.639378+00:00

certfr-2024-avi-0575

cnvd-2021-44765

2026-10-04T11:03:52.639395+00:00

cnvd-2021-44765

EUVD-2026-42129

2026-10-04T11:03:52.639407+00:00

EUVD-2026-42129

fkie_cve-2020-13938

2026-10-04T11:03:52.639416+00:00

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

GHSA-qvx2-v283-5hp3

2026-10-04T11:03:52.639435+00:00

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows

gsd-2020-13938

2026-10-04T11:03:52.639448+00:00

gsd-2020-13938

ICSA-22-132-02 — Mitsubishi Electric MELSOFT iQ AppPortal

2026-10-04T11:03:52.639457+00:00

Apache HTTP Server Versions 2.4.0 to 2.4.46 allow unprivileged local users to stop httpd on Windows.CVE-2020-13938 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). In Apache HTTP Server Versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow.CVE-2021-26691 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server Versions 2.4.48 and earlier.CVE-2021-34798 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). An attacker who can present SM2 content for decryption to an application could cause data to overflow the buffer up to a maximum of 62 bytes, altering the contents of other data held after the buffer or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1 (Affected 1.1.1-1.1.1k). This issue is detailed further in CVE-2021-3711.CVE-2021-3711 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A carefully crafted request body can ca…

WID-SEC-W-2022-0438 — Apache HTTP Server: Mehrere Schwachstellen

2026-10-04T11:03:52.639493+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.