VYPR

Apache2

by Debian

CVEs (3)

  • CVE-2026-84750MedSep 19, 2026
    risk 0.42cvss 6.5epss 0.00

    The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension intact, allowing unauthenticated users to…

  • CVE-2006-7098Mar 3, 2007
    risk 0.03cvss —epss 0.01

    The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl.

  • CVE-2013-1048Mar 6, 2013
    risk 0.00cvss —epss 0.00

    The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain…