Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownCVE-2026-93546 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-79768 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-73637 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-73636 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-63718 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-63686 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-63292 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-63045 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-58415 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Oct 14, 2026
- UnknownHTTP/2 Bomb CVE-2026-49975Aug 12, 2026
- Medium5.3A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a cachin…May 4, 2026
- Medium4.8A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.May 4, 2026
- High7.5A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is…May 4, 2026
- High8.8Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.May 4, 2026
- High8.8An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.May 4, 2026
- Medium6.3Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions before 1.7.0, fails to sanitize characters forb…Apr 10, 2026
- Medium6.3Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net…Apr 10, 2026
- Medium6.3Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON…Apr 10, 2026
- Medium6.9Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters…Apr 10, 2026
- Medium6.9The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output.Apr 10, 2026
- Medium6.9Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log inje…Apr 10, 2026
- Medium6.3The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.…Apr 10, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Apr 9, 2026
- Medium5.3Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.Apr 9, 2026
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Dec 14, 2021
106 records · page 1 of 5
PreviousNext