Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-57941 1 Apache 2 Apache Http Server, Http Server 2026-10-05 9.8 Critical
Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2026-58415 2 Apache, Redhat 3 Apache Http Server, Http Server, Hummingbird 2026-10-05 5.3 Medium
Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
CVE-2010-1151 1 Apache 1 Apache Http Server 2025-04-11 N/A
Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.