Apache - CVE CyberSecurity Database News (Page 4)

Jul 1, 2024 Windows Apache

CVE-2024-38475 - Apache HTTP Server 2.4.59 Improper Escaping of Output in mod_rewrite leads to Code Execution and Source Code Disclosure

The Apache HTTP Server is an open-source web server for Unix-like operating systems and Windows, providing a secure, customizable, and efficient service to host web

Jun 20, 2024 Exploit Apache

CVE-2024-6162: Undertow AJP Listener Concurrent Requests Vulnerability in URL-Encoded Request Paths

A newly discovered vulnerability (CVE-2024-6162) found in the Undertow web server can potentially cause denial of service attacks due to improper handling of URL-encoded request

Jun 19, 2024 Exploit Java Apache

CVE-2024-32030: Potential Remote Code Execution Vulnerability in Kafka UI Due to JMX Deserialization Attack

Kafka UI is an open-source web interface for managing and monitoring Apache Kafka clusters. One of its core features is the ability to connect to

Jun 9, 2024 Windows API Apache PHP

CVE-2024-4577: A Deep Dive into PHP Vulnerability, Exploiting the "Best-Fit" Behavior on Windows Systems

In this long read, we delve into a recently discovered PHP vulnerability that affects specific versions of PHP (8.1.* before 8.1.29, 8.

May 8, 2024 Exploit Java Apache

CVE-2024-32113: Path Traversal Vulnerability in Apache OFBiz (before 18.12.13)

A critical path traversal vulnerability has been discovered in Apache OFBiz, an open-source Enterprise Resource Planning (ERP) system widely used by businesses across the globe.