Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
425,849CVE records
4,582Published, last 7 days
1,781In CISA KEV
1,348Critical, last 30 days
5,599Analysed
19:17 UTCLast NVD sync
Filters Show:
33 results. Apache Http Server.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-59797 | Critical | 9.8 |  Apache Http Server | Improper privilege management | - | - | 0.50% | Oct 1, 2026 |
| CVE-2026-57941 | Critical | 9.8 | Apache Http Server | Use after free | - | - | 0.59% | Oct 1, 2026 |
| CVE-2026-56154 | Critical | 9.8 | Apache Http Server | Use after free | - | - | 0.54% | Oct 1, 2026 |
| CVE-2026-44631 | Critical | 9.8 | Apache Http Server | CWE-124 | - | - | 0.50% | Jun 8, 2026 |
| CVE-2026-42535 | Critical | 9.1 | Apache Http Server | Exposure of resource to wrong sphe | - | - | 0.54% | Jun 8, 2026 |
| CVE-2026-29167 | Critical | 9.8 | Apache Http Server | Use after free | - | - | 0.69% | Jun 8, 2026 |
| CVE-2026-28780 | Critical | 9.8 | Apache Http Server | Heap-based buffer overflow | - | - | 1.4% | May 5, 2026 |
| CVE-2025-23048 | Critical | 9.1 | Apache Http Server | Improper access control | - | - | 1.0% | Jul 10, 2025 |
| CVE-2024-38476 | Critical | 9.8 | Apache Http Server +1 | Inclusion from untrusted sphere | - | - | 42% | Jul 1, 2024 |
| CVE-2024-38475 | Critical | 9.1 | Apache Http Server +6 | CWE-116 | Listed | Confirmed | 100% | Jul 1, 2024 |
| CVE-2024-38474 | Critical | 9.8 | Apache Http Server +1 | CWE-116 | - | - | 2.5% | Jul 1, 2024 |
| CVE-2023-25690 | Critical | 9.8 | Apache Http Server | HTTP request smuggling | - | - | 84% | Mar 7, 2023 |
| CVE-2022-36760 | Critical | 9.0 | Apache Http Server | HTTP request smuggling | - | - | 1.9% | Jan 17, 2023 |
| CVE-2022-31813 | Critical | 9.8 | Apache Http Server +2 | CWE-348 | - | - | 3.5% | Jun 9, 2022 |
| CVE-2022-28615 | Critical | 9.1 | Apache Http Server +2 | Integer overflow | - | - | 6.5% | Jun 9, 2022 |
| CVE-2022-23943 | Critical | 9.8 | Apache Http Server +3 | Integer overflow | - | - | 50% | Mar 14, 2022 |
| CVE-2022-22721 | Critical | 9.1 | Apache Http Server +6 | Integer overflow | - | - | 42% | Mar 14, 2022 |
| CVE-2022-22720 | Critical | 9.8 | Apache Http Server +6 | HTTP request smuggling | - | - | 28% | Mar 14, 2022 |
| CVE-2021-44790 | Critical | 9.8 | Apache Http Server +12 | Out-of-bounds write | - | 2 refs | 97% | Dec 20, 2021 |
| CVE-2021-42013 | Critical | 9.8 | Apache Http Server +5 | Path traversal | Listed · RW | Confirmed | 100% | Oct 7, 2021 |
