Oracle HTTP Server 10.1.3.5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:http_server:10.1.3.5.0:*:*:*:*:*:*:*
part: a version: 10.1.3.5.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Http Server (674ac569-7e26-5533-9e32-c5eabf3879bc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0226 |
vulnerable | 2026-06-08 05:05:12.351629 |
Details available
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:05:39.328Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0098 |
vulnerable | 2026-06-08 05:05:11.435188 |
Details available
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.
Published: 2014-03-18T01:00:00.000Z
Updated: 2024-08-06T09:05:38.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6438 |
vulnerable | 2026-06-08 05:04:56.820863 |
Details available
The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.
Published: 2014-03-18T01:00:00.000Z
Updated: 2024-08-06T17:39:01.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5704 |
vulnerable | 2026-06-08 05:04:53.242931 |
Details available
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."
Published: 2014-04-15T10:00:00.000Z
Updated: 2024-08-06T17:22:30.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1862 |
vulnerable | 2026-06-08 05:03:56.981248 |
Details available
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
Published: 2013-06-10T17:00:00.000Z
Updated: 2024-08-06T15:20:37.197Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0425 |
vulnerable | 2026-06-08 04:52:02.466194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5000 |
vulnerable | 2026-06-08 04:49:57.651659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.