Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Updated packages that provide Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 10, fix several bugs, and add various enhancements are now ava…
The package apache before version 2.4.51-1 is vulnerable to directory traversal.
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files …
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition a vulnerability was discovered in mod_p…
Developers behind the Apache HTTP Server Project are urging users to apply a fix immediately to resolve a zero-day vulnerability.
Several vulnerabilities were discovered in the Apache HTTP server. An attacker could send proxied requests to arbitrary servers, corrupt memory in some setups …
Apache Commons IO could be made to expose sensitive information if it received a specially crafted input.
USN-5090-1 introduced a regression in Apache HTTP Server.
USN-5090-1 introduced a regression in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
Apache OpenOffice (AOO) is currently vulnerable to a remote code execution vulnerability (CVE-2021-33035) recently discovered by security researcher Eugene Lim…
Multiple vulnerabilities have been found in Apache Velocity, the worst of which could result in the arbitrary execution of code.
Multiple vulnerabilities have been found in Apache Commons FileUpload, the worst of which could result in a Denial of Service condition.
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
Apache Commons Collections unsafely deserializes untrusted input, potentially resulting in arbitrary code execution.
Multiple vulnerabilities have been found in Apache Thrift, the worst of which could result in a Denial of Service condition.
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
Several security issues were fixed in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
mod_proxy_wstunnel tunneling of non Upgraded connections: Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not neces…
On April 12, 2021, the Apache SpamAssassin Project announced the release of Apache SpamAssassin Version 3.4.6 mitigating two small but potentially annoying bug…
Apache OpenMeetings is a popular and free alternative for web conferencing software. The release of OpenMeetings 6.0 features multiple security improvements.
