A critical security vulnerability has been identified in the Apache Plugin component of Oracle HTTP Server, part of Oracle Fusion Middleware. The affected versions of this software are 12.2.1.4.0 and 14.1.2.0.0.
This flaw is easy to exploit, and requires no login credentials or special access for an attacker to use it. Anyone who can send standard ...
Continue reading
A security flaw has been found in the inets httpd web server module included with Erlang OTP, a software platform some websites use to process web traffic. The issue is classified as HTTP request smuggling, a type of vulnerability that can let attackers sneak unauthorized commands or data into legitimate visitor traffic to bypass a website's ...
Continue reading
A security vulnerability has been identified in the NGINX JavaScript feature. This issue only impacts sites that have the js_fetch_proxy setting configured to pull data from parts of incoming web requests that visitors can control (such as URL parameters, cookies, or custom HTTP headers) and that also use the ngx.fetch() function from NGINX ...
Continue reading
A security flaw has been found in MariaDB versions 3.3.18 and 3.4.8. MariaDB is a popular community-developed database system, forked from MySQL, that many websites use to store information like user accounts, content, and transaction data.The vulnerability affects websites using these MariaDB versions that accept unvetted visitor input (such as ...
Continue reading
