https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T15:32:24.871385+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-37436 CVE-2022-37436 — Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting 2026-10-04T15:32:24.875458+00:00

Affected: Apache Software Foundation Apache HTTP Server

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.

 https://vulnerability.circl.lu/vuln/usn-5839-1 USN-5839-1 — apache2 vulnerabilities 2026-10-04T15:32:24.875572+00:00

Affected: Ubuntu:18.04:LTS: apache2, Ubuntu:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2

It was discovered that the Apache HTTP Server mod_dav module incorrectly handled certain If: request headers. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. (CVE-2006-20001)

ZeddYu_Lu discovered that the Apache HTTP Server mod_proxy_ajp module incorrectly interpreted certain HTTP Requests. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2022-36760)

Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server mod_proxy module incorrectly truncated certain response headers. This may result in later headers not being interpreted by the client. (CVE-2022-37436)