CVE-2024-39884

MEDIUM Year: 2024
CVSS v3 Score
6.2
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.61, which fixes this issue.

Related Vulnerabilities

CVE-2016-2543

MEDIUM
CVSS:6.2(Medium)

The snd_seq_ioctl_remove_events function in sound/core/seq/seq_clientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FIFO clearing, which allows local use...

NVD-CWE-Other2016

CVE-2017-10356

MEDIUM
CVSS:6.2(Medium)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embed...

NVD-CWE-Other2017

CVE-2017-13309

MEDIUM
CVSS:6.2(Medium)

In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges ...

NVD-CWE-Other2017

CVE-2017-18780

MEDIUM
CVSS:6.2(Medium)

Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR...

NVD-CWE-Other2017

CVE-2017-18836

MEDIUM
CVSS:6.2(Medium)

Certain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-...

NVD-CWE-Other2017

CVE-2017-3718

MEDIUM
CVSS:6.2(Medium)

Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access.

NVD-CWE-Other2017