Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....
Search - Review
plg_search_jdownloads
Search - K2
Suche - Kategorien
Suche - Kontakte
Suche - Inhalt
Suche - Newsfeeds
Suche - Schlagwörter
Server Security (2)
Im Sinne der Aktualität sind diese News grösstenteils in englischer Sprache. Falls nötig, bitte die Übersetzungsfunktion verwenden.
-
CVE-2021-31618
Latest security vulnerabilities Apache Http Server Jun 15, 2021 | 00:00 amApache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent[…]
Read more... -
CVE-2020-13950
Latest security vulnerabilities Apache Http Server Jun 10, 2021 | 00:00 amApache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service (CVSS:5.0) (Last Update:2021-07-17)
Read more... -
CVE-2020-35452
Latest security vulnerabilities Apache Http Server Jun 10, 2021 | 00:00 amApache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular[…]
Read more... -
CVE-2021-26690
Latest security vulnerabilities Apache Http Server Jun 10, 2021 | 00:00 amApache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service (CVSS:5.0) (Last Update:2021-07-17)
Read more... -
CVE-2021-26691
Latest security vulnerabilities Apache Http Server Jun 10, 2021 | 00:00 amIn Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow (CVSS:7.5) (Last Update:2021-07-17)
Read more... -
CVE-2021-30641
Latest security vulnerabilities Apache Http Server Jun 10, 2021 | 00:00 amApache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' (CVSS:5.0) (Last Update:2021-07-17)
Read more... -
CVE-2020-9490
Latest security vulnerabilities Apache Http Server Aug 7, 2020 | 00:00 amApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via[…]
Read more... -
CVE-2020-11984
Latest security vulnerabilities Apache Http Server Aug 7, 2020 | 00:00 amApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE (CVSS:7.5) (Last Update:2021-06-06)
Read more... -
CVE-2020-11985
Latest security vulnerabilities Apache Http Server Aug 7, 2020 | 00:00 amIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server[…]
Read more... -
CVE-2020-11993
Latest security vulnerabilities Apache Http Server Aug 7, 2020 | 00:00 amApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2[…]
Read more...
Published in: Server Security
-
CVE-2021-23017
Latest security vulnerabilities Nginx products Jun 1, 2021 | 00:00 amA security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. (CVSS:7.5) (Last[…]
Read more... -
CVE-2020-24346
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c. (CVSS:6.8) (Last Update:2020-09-18)
Read more... -
CVE-2020-24347
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. (CVSS:2.1) (Last Update:2020-09-18)
Read more... -
CVE-2020-24348
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c. (CVSS:2.1) (Last Update:2020-09-18)
Read more... -
CVE-2020-24349
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface. (CVSS:2.1) (Last Update:2020-09-18)
Read more... -
CVE-2019-20372
Latest security vulnerabilities Nginx products Jan 9, 2020 | 00:00 amNGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer. (CVSS:4.3) (Last Update:2020-01-15)
Read more... -
CVE-2019-13617
Latest security vulnerabilities Nginx products Jul 16, 2019 | 00:00 amnjs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call. (CVSS:4.3) (Last Update:2020-08-24)
Read more... -
CVE-2019-13067
Latest security vulnerabilities Nginx products Jun 30, 2019 | 00:00 amnjs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. (CVSS:7.5) (Last Update:2019-07-05)
Read more... -
CVE-2019-12207
Latest security vulnerabilities Nginx products May 20, 2019 | 00:00 amnjs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. (CVSS:7.5) (Last Update:2020-08-24)
Read more... -
CVE-2019-12208
Latest security vulnerabilities Nginx products May 20, 2019 | 00:00 amnjs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c. (CVSS:7.5) (Last Update:2020-08-24)
Read more...
Published in: Server Security