Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities were fixed in libapache2-mod-auth-openidc, an OpenID Connect Relying Party implementation for Apache. CVE-2019-20479
Researchers spotted a severe unpatched remote code execution vulnerability shipped by default in Apache Superset.…Apache Superset Shipped With Unpatched RCE Vu…
Apache Commons Net could be made to expose sensitive information over the network.
The maintainers of theApache Supersetopen source data visualization software have released fixes to plug an insecure default configuration that could lead to r…
Several vulnerabilities have been discovered in apache2, a webserver that may be used as front-end proxy for other applications. These vulnerabilities may lead…
Apache HTTP Server could allow unintended access to network services.
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in HTTP response splitting or denial of service. For the stable distr…
Some mod_proxy configurations on Apache HTTP Server allow a HTTP request smuggling attack. Configurations are affected when mod_proxy is enabled along with som…
libapache2-mod-auth-mellon, a SAML 2.0 authentication module for Apache, were reported to have the following vulnerabilities. CVE-2019-13038
Several security issues were fixed in Apache HTTP Server.
Multiple security vulnerabilities have been discovered in Apache HTTP server. CVE-2006-20001
Several security issues were fixed in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the d…
In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default c…
Multiple issues were found in modsecurity-apache, open source, cross platform web application firewall (WAF) engine for Apache which allows remote attackers to…
A vulnerability has been discovered in Apache Commons Text which could result in arbitrary code execution.
The Zerobot botnet, first detected earlier this month, is expanding the types of Internet of Things (IoT) devices it can compromise by going after Apache syste…
The Apache SpamAssassin project has released version 4.0.0 of its renowned open-source anti-spam platform with numerous tweaks and bug fixes and improved class…
Recently, a remote code execution flaw in the Apache Common Text library stirred up the…Apache Commons Text Library Flaw Is Worrisome, But Not Like Log4Shell o…
A now-patched vulnerability in the Apache Pulsar platform could allow MiTM attacks, risking numerous essential…Apache Pulsar Vulnerability Could Allow MiTM Att…
Multiple vulnerabilities have been discovered in Apache Tomcat, the worst of which could result in denial of service.
Multiple vulnerabilities have been discovered in Apache Webserver, the worst of which could result in remote code execution.
