Apache - CVE CyberSecurity Database News (Page 90)

Apr 14, 2022 Apache

CVE-2022-25165 An TOCTOU race condition was found in Amazon AWS VPN Client 2.0.0.

As an example, the following piece of code causes a SYSTEM log file to be created with the value of /etc/passwd: This can be

Apr 12, 2022 Windows Microsoft Apache

CVE-2022-24070 Subversion's mod_dav_svn is vulnerable to memory corruption. It may attempt to use memory which has already been freed.

This may allow an attacker to execute arbitrary code on the server. How might I avoid this? It is recommended that you upgrade your Subversion

Apr 12, 2022 Exploit Apache PHP

CVE-2022-27140 - How a Simple Bug in Express-Fileupload Lets Hackers Upload and Run PHP Files

The world of web development is fast-moving, and sometimes speed means mistakes. One of those costly errors happened in the popular express-fileupload module, a widely-used

Apr 5, 2022 Apache

CVE-2022-22356 IBM MQ Appliance 9.2 CD and LTS could be vulnerable to account enumeration if there are discrepancies in login attempts.

This issue can be mitigated by disabling the eXplained Syslog option or configuring an external syslog server. An attacker can determine the base64-decoded username from

Apr 5, 2022 Apache

CVE-2022-0452 An attacker could perform a sandbox escape in Google Chrome before 98.0.4758.80 by using an HTML page that triggers after free.

CVE-2016-5287, a different vulnerability than CVE-2016-5287, a different vulnerability than CVE-2016-5287, a different vulnerability than CVE-2016-5287, a different vulnerability than CVE-2016-5287, a different vulnerability than