Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was found that Apache Log4j2, a Logging Framework for Java, did not protect from uncontrolled recursion from self-referential lookups. When the logging conf…
It was discovered that modsecurity-apache, an Apache module to tighten the Web application security, does not properly handles excessively nested JSON objects,…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
As the critical “Log4Shell” bug stirs up the internet, the cybersecurity community is rushing for…‘Vaccine’ For Apache Log4j Vulnerability Released Amidst Acti…
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 10 zip release for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Microsoft Win…
Updated packages that provide Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 10, fix several bugs, and add various enhancements are now ava…
The package apache before version 2.4.51-1 is vulnerable to directory traversal.
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files …
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition a vulnerability was discovered in mod_p…
Developers behind the Apache HTTP Server Project are urging users to apply a fix immediately to resolve a zero-day vulnerability.
Several vulnerabilities were discovered in the Apache HTTP server. An attacker could send proxied requests to arbitrary servers, corrupt memory in some setups …
Apache Commons IO could be made to expose sensitive information if it received a specially crafted input.
USN-5090-1 introduced a regression in Apache HTTP Server.
USN-5090-1 introduced a regression in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
Several security issues were fixed in Apache HTTP Server.
Apache OpenOffice (AOO) is currently vulnerable to a remote code execution vulnerability (CVE-2021-33035) recently discovered by security researcher Eugene Lim…
Multiple vulnerabilities have been found in Apache Velocity, the worst of which could result in the arbitrary execution of code.
Multiple vulnerabilities have been found in Apache Commons FileUpload, the worst of which could result in a Denial of Service condition.
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
Apache Commons Collections unsafely deserializes untrusted input, potentially resulting in arbitrary code execution.
Multiple vulnerabilities have been found in Apache Thrift, the worst of which could result in a Denial of Service condition.
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
