The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 68.3%.
Denial Of Service
Apache
Http Server
Apache HTTP Server
NVD
GitHub
Exploit-DB
CVSS 3.0
7.5
EPSS
68.3%
Threat
5.0
A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Siemens
Sicam Pas Pqs
NVD
CVSS 3.1
7.3
EPSS
0.5%