CVE Vulnerabilities - 27 June 2026

Apache HTTP Server's log files can expose sensitive information, including user data and system paths. This vulnerability allows attackers to access and potentially exploit this sensitive information....

Apache HTTP Server on Windows allows unauthorized access to files on the server, which can lead to data theft or system compromise. This vulnerability affects servers running Apache HTTP Server on Win...

A security flaw in a popular WordPress plugin can allow hackers to inject malicious code into websites, potentially stealing user data or taking control of the site. This issue affects websites using ...

Apache's Windows version allows unauthorized access to files due to a misconfigured Windows service. This can happen when an attacker sends a specific request to the server, which could potentially le...

Apache's mod_proxy_fcgi module in the HTTP Server has a bug that can cause the server to access memory it shouldn't, potentially leading to crashes or data corruption. This affects servers that use mo...

The Apache HTTP Server on Windows may allow an attacker to inject malicious code into a website, potentially stealing user data or taking control of the website. This affects Windows users who use the...

Apache HTTP Server versions 2.4.53 and earlier allow an attacker to execute malicious code on the server by sending a specially crafted HTTP request. This can lead to unauthorized access to the server...

Adobe Reader, a popular PDF viewer, contains a vulnerability that could allow hackers to execute malicious code on a user's device. This could lead to unauthorized access to sensitive information or t...

Apache HTTP Server versions 2.4.52 and earlier contain a vulnerability that allows an attacker to execute arbitrary code on a server. This could happen if a malicious user sends a specially crafted HT...

The WordPress Invoice Generator plugin has a security flaw that lets attackers change the email address of any user, including administrators. This can be used to gain access to sensitive accounts. Up...

Apache HTTP Server may allow attackers to execute arbitrary code on the server when processing specially crafted HTTP requests. This is a significant risk because attackers can gain control of the ser...

Apache HTTP Server's mod_proxy module allows attackers to access sensitive files on a server by manipulating HTTP requests. This can lead to unauthorized access to sensitive data, potentially compromi...

Apache HTTP Server versions 2.4.51 and earlier may allow attackers to execute arbitrary code on the server. This could happen if an attacker sends a specially crafted request to the server. To protect...

The Apache HTTP Server is vulnerable to a file disclosure bug. This means that an attacker can access sensitive files on a server without needing a password. Businesses should update their Apache HTTP...

Adobe Reader, a popular PDF viewer, has a security flaw that can allow an attacker to read or modify sensitive files on your computer. This could lead to unauthorized access to your data. To stay safe...

Apache HTTP Server versions 2.4.52 and earlier have a vulnerability that could allow an attacker to crash the server, causing it to stop working temporarily. This could potentially impact the availabi...

The Apache HTTP Server is affected by a vulnerability that allows an attacker to access sensitive files on the server without authentication. This could potentially lead to data exposure and unauthori...

Apache's HTTP Server for Windows has a security flaw that allows an attacker to access any file on the server. This could happen if an attacker sends a specially crafted request to the server. To fix ...

Apache HTTP Server's configuration file parser has a vulnerability that allows attackers to execute arbitrary code on a server without needing a password. This could allow hackers to take control of a...

Apache HTTP Server has a vulnerability that allows an attacker to crash the server or potentially execute malicious code. This affects servers that use Apache HTTP Server to handle web requests. To mi...

Apache HTTP Server's PHP handler is vulnerable to cross-site scripting attacks. This means an attacker could inject malicious code into a website, potentially stealing user data or taking control of t...

Apache HTTP Server versions 2.4.52 and earlier allow an attacker to execute malicious code on a server without needing a password. This can happen if a user visits a specially crafted website. To prot...

Zephyr's IP socket receive function does not properly check the size of a user-supplied buffer, allowing an attacker to cause a buffer overflow. This can lead to data corruption and potentially allow ...

Apache HTTP Server on Windows may allow an attacker to read or write files outside the intended directory. This can happen if an attacker sends a specially crafted request to the server. To fix this, ...