Apache

Apache is a free, open-source web server software.
It delivers websites and web pages to users over the Internet.
It runs on many operating systems and supports various web technologies.

NewsSecurity Vulnerabilities

Apache HTTPD Server ap_escape_html2 Integer Overflow Remote Code Execution Vulnerability [CVE-2022-22721]

CVE number – CVE-2022-22721 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache HTTPD Server.

Read More
NewsSecurity Vulnerabilities

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability [CVE-2021-45105]

Please note that this vulnerability is not the main well known Log4j one, for further information on CVE-2021-44228 please click

Read More
NewsSecurity Vulnerabilities

Critical Apache Log4j remote code execution vulnerability [CVE-2021-44228]

A critical remote code execution vulnerability in Apache Foundation Log4j library has been discovered. This vulnerability has been dubbed Log4Shell.

Read More
NewsSecurity Vulnerabilities

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 (CVE-2021-41773)

CVE number = CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49.

Read More
NewsSecurity Vulnerabilities

Path Traversal and Remote Code Execution in Apache HTTP Server (incomplete fix of CVE-2021-41773) (CVE-2021-42013)

It was discovered that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a

Read More
NewsSecurity Vulnerabilities

Apache Tomcat – Denial of service vulnerability [CVE-2021-42340]

CVE number – CVE-2021-42340 The Apache Software Foundation has released a security advisory to address a vulnerability in multiple versions

Read More
NewsSecurity Vulnerabilities

Apache Releases Security Update for Apache HTTP Server 2.4 [CVE-2021-41773]

CVE number – CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49.

Read More
NewsSecurity Vulnerabilities

Apache OpenOffice remote code execution flaw [CVE-2021-33035]

CVE number = CVE-2021-33035 Security researcher Eugene Lim (@spaceraccoonsec) has revealed technical details about a remote code execution flaw in

Read More
NewsSecurity Vulnerabilities

Apache NuttX vulnerable to integer wrap-arounds [CVE-2021-26461]

CVE number = CVE-2021-26461 Apache Nuttx (incubating) versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc

Read More
NewsSecurity Vulnerabilities

Apache SpamAssassin malicious rule configuration [CVE-2020-1946]

CVE number – CVE-2020-1946 Apache SpamAssassin 3.4.5 was recently released [1], and fixes an issue of security note where malicious

Read More