Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....
Search - Review
plg_search_jdownloads
Search - K2
Suche - Kategorien
Suche - Kontakte
Suche - Inhalt
Suche - Newsfeeds
Suche - Schlagwörter
Server Security (2)
Im Sinne der Aktualität sind diese News grösstenteils in englischer Sprache. Falls nötig, bitte die Übersetzungsfunktion verwenden.
-
CVE-2021-42013
Latest security vulnerabilities Apache Http Server Oct 7, 2021 | 00:00 amIt was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these[…]
Read more... -
CVE-2021-41524
Latest security vulnerabilities Apache Http Server Oct 5, 2021 | 00:00 amWhile fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit[…]
Read more... -
CVE-2021-41773
Latest security vulnerabilities Apache Http Server Oct 5, 2021 | 00:00 amA flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of[…]
Read more... -
CVE-2021-34798
Latest security vulnerabilities Apache Http Server Sep 16, 2021 | 00:00 amMalformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. (CVSS:5.0) (Last Update:2021-10-19)
Read more... -
CVE-2021-36160
Latest security vulnerabilities Apache Http Server Sep 16, 2021 | 00:00 amA carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive). (CVSS:5.0) (Last Update:2021-10-20)
Read more... -
CVE-2021-39275
Latest security vulnerabilities Apache Http Server Sep 16, 2021 | 00:00 amap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier. (CVSS:7.5) (Last Update:2021-10-10)
Read more... -
CVE-2021-40438
Latest security vulnerabilities Apache Http Server Sep 16, 2021 | 00:00 amA crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. (CVSS:6.8) (Last Update:2021-10-19)
Read more... -
CVE-2021-33193
Latest security vulnerabilities Apache Http Server Aug 16, 2021 | 00:00 amA crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48. (CVSS:5.0) (Last Update:2021-10-19)
Read more... -
CVE-2021-31618
Latest security vulnerabilities Apache Http Server Jun 15, 2021 | 00:00 amApache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent[…]
Read more... -
CVE-2021-30641
Latest security vulnerabilities Apache Http Server Jun 10, 2021 | 00:00 amApache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' (CVSS:5.0) (Last Update:2021-10-20)
Read more...
Published in: Server Security
-
CVE-2020-24346
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c. (CVSS:6.8) (Last Update:2020-09-18)
Read more... -
CVE-2020-24347
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. (CVSS:2.1) (Last Update:2020-09-18)
Read more... -
CVE-2020-24348
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c. (CVSS:2.1) (Last Update:2020-09-18)
Read more... -
CVE-2020-24349
Latest security vulnerabilities Nginx products Aug 13, 2020 | 00:00 amnjs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface. (CVSS:2.1) (Last Update:2020-09-18)
Read more... -
CVE-2019-20372
Latest security vulnerabilities Nginx products Jan 9, 2020 | 00:00 amNGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer. (CVSS:4.3) (Last Update:2021-09-22)
Read more... -
CVE-2019-13617
Latest security vulnerabilities Nginx products Jul 16, 2019 | 00:00 amnjs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call. (CVSS:4.3) (Last Update:2020-08-24)
Read more... -
CVE-2019-13067
Latest security vulnerabilities Nginx products Jun 30, 2019 | 00:00 amnjs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. (CVSS:7.5) (Last Update:2019-07-05)
Read more... -
CVE-2019-12206
Latest security vulnerabilities Nginx products May 20, 2019 | 00:00 amnjs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c. (CVSS:7.5) (Last Update:2020-08-24)
Read more... -
CVE-2019-12207
Latest security vulnerabilities Nginx products May 20, 2019 | 00:00 amnjs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. (CVSS:7.5) (Last Update:2020-08-24)
Read more... -
CVE-2019-12208
Latest security vulnerabilities Nginx products May 20, 2019 | 00:00 amnjs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c. (CVSS:7.5) (Last Update:2020-08-24)
Read more...
Published in: Server Security