Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle instantis enterprisetrack vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known...
Apache Http Server 2.4.49Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Netapp Cloud Backup -
7.5
CVSSv3

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usu...
Apache Http Server 2.4.49Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Netapp Cloud Backup -
5.3
CVSSv3

CVE-2019-17567

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP valid...
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8
7.5
CVSSv3

CVE-2021-33503

An issue exists in urllib3 prior to 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via ...
Python Urllib3Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8
7.5
CVSSv3

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
Wireshark WiresharkOracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8Debian Debian Linux 10.0Debian Debian Linux 11.0
9.8
CVSSv3

CVE-2021-42013

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by t...
Apache Http Server 2.4.49Apache Http Server 2.4.50Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Jd Edwards Enterpriseone ToolsOracle Secure BackupNetapp Cloud Backup -
7.5
CVSSv3

CVE-2020-13950

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service
Apache Http ServerDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8
5.3
CVSSv3

CVE-2021-30641

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
Apache Http ServerDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8
7.3
CVSSv3

CVE-2020-35452

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation ...
Apache Http ServerDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8
7.5
CVSSv3

CVE-2021-26690

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service
Apache Http ServerDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Zfs Storage Appliance Kit 8.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-44852CVE-2024-3400CVE-2024-30129insecure direct object referenceCVE-2024-12115CVE-2024-11220CVE-2024-51378privilege escalation
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook