[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2014-0226":3,"landing-articles":161},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":78,"references":86,"score":140,"epss_score":141,"epss_percentile":142,"is_kev":143,"cisa_kev_date_added":144,"cisa_kev_due_date":144,"cisa_ssvc":145,"attack_mappings":151,"exploits":158},171064,"CVE-2014-0226","EUVD-2014-0268","Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules\u002Fgenerators\u002Fmod_status.c and the lua_ap_scoreboard_worker function in modules\u002Flua\u002Flua_request.c.","2014-07-20T11:12:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.8,"NETWORK","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","MEDIUM",true,[20],"CWE-362",[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77],"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_ops_center:11.1.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.15:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:secure_global_desktop:5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.20:*:*:*:*:*:*:*","cpe:2.3:a:oracle:secure_global_desktop:5.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.23:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.13:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:http_server:11.1.1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.10:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:secure_global_desktop:4.71:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.19:*:*:*:*:*:*:*","cpe:2.3:a:oracle:secure_global_desktop:4.63:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.7:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.28:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.27:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.15-60:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.17:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.12:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:http_server:10.1.3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.7:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:http_server:12.1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.26:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.16:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.22:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.24:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.25:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:http_server:12.1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.14:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.18:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.4.9:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.21:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:http_server:2.2.9:*:*:*:*:*:*:*",[79,80,81,82,83,84,85],"Oracle Http Server","Redhat Jboss Enterprise Application Platform","Debian Debian Linux","Apache Http Server","Oracle Enterprise Manager Ops Center","Redhat Enterprise Linux","Oracle Secure Global Desktop",[87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139],"http:\u002F\u002Fadvisories.mageia.org\u002FMGASA-2014-0304.html","http:\u002F\u002Fadvisories.mageia.org\u002FMGASA-2014-0305.html","http:\u002F\u002Fhttpd.apache.org\u002Fsecurity\u002Fvulnerabilities_24.html","http:\u002F\u002Flists.apple.com\u002Farchives\u002Fsecurity-announce\u002F2015\u002FApr\u002Fmsg00001.html","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=143403519711434&w=2","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=143748090628601&w=2","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=144050155601375&w=2","http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=144493176821532&w=2","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1019.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1020.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1021.html","http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FJul\u002F114","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F60536","http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-201408-12.xml","http:\u002F\u002Fsvn.apache.org\u002Frepos\u002Fasf\u002Fhttpd\u002Fhttpd\u002Fbranches\u002F2.2.x\u002FCHANGES","http:\u002F\u002Fsvn.apache.org\u002Fviewvc\u002Fhttpd\u002Fhttpd\u002Ftrunk\u002Fmodules\u002Fgenerators\u002Fmod_status.c","http:\u002F\u002Fsvn.apache.org\u002Fviewvc\u002Fhttpd\u002Fhttpd\u002Ftrunk\u002Fmodules\u002Fgenerators\u002Fmod_status.c?r1=1450998&r2=1610491&diff_format=h","http:\u002F\u002Fsvn.apache.org\u002Fviewvc\u002Fhttpd\u002Fhttpd\u002Ftrunk\u002Fmodules\u002Flua\u002Flua_request.c","http:\u002F\u002Fsvn.apache.org\u002Fviewvc\u002Fhttpd\u002Fhttpd\u002Ftrunk\u002Fmodules\u002Flua\u002Flua_request.c?r1=1588989&r2=1610491&diff_format=h","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2014\u002Fdsa-2989","http:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F34133","http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2014:142","http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpujan2015-1972971.html","http:\u002F\u002Fwww.osvdb.org\u002F109216","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F68678","http:\u002F\u002Fzerodayinitiative.com\u002Fadvisories\u002FZDI-14-236\u002F","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1120603","https:\u002F\u002Fh20564.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c04832246","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","https:\u002F\u002Fpuppet.com\u002Fsecurity\u002Fcve\u002Fcve-2014-0226","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201504-03","https:\u002F\u002Fsupport.apple.com\u002FHT204659","https:\u002F\u002Fwww.povonsec.com\u002Fapache-2-4-7-exploit\u002F",0.73,0.85744,0.99729,false,null,{"timestamp":144,"automatable":146,"tech_impact":147,"exploitation":148,"cisa_decision":149,"cisa_remediation_timeline":150},"no","partial","none",{},"FSU",[152],{"name":153,"source":154,"tactics":155,"technique_id":157},"Exploit Public-Facing Application","attack_vector",[156],"initial-access","T1190",[159,160],{"link":107},{"link":98},{"count":162,"next":163,"previous":144,"results":164},30,"http:\u002F\u002Fweb:8606\u002Fapi\u002Farticles\u002F?page=2&sorted_by=-published_at",[165,172,180,188,195,202,209,214,221,228],{"id":162,"title":166,"summary":167,"published_at":168,"type":169,"link":170,"image_url":171},"PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)","Unauthenticated code execution demonstrated on WordPress, Drupal and Joomla, and reproduced in our lab. Patched versions and steps to take today.","2026-10-22T00:00:00Z","cve","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fc0615c4ee6-1792684469\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2.png",{"id":173,"title":174,"summary":175,"published_at":176,"type":177,"link":178,"image_url":179},29,"Manage External Security Across All Your Entities","Centralize the management of entities, users and external security resources while maintaining strict data isolation with Patrowl.","2026-09-15T00:00:00Z","security tips","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fmulti-entity-external-security-how-structure-governance-group-level","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F8b2c0cc5eb-1789551467\u002Fvisu_1_multi_tenancy_dark_1x.webp",{"id":181,"title":182,"summary":183,"published_at":184,"type":185,"link":186,"image_url":187},28,"Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34","Tax law, finance, legislation: Bruce Schneier shows how AI could hack human rule systems just as easily as it hacks software.","2026-09-14T00:00:00Z","hacks","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fbruce-schneier-def-con-34","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F5c616d9db4-1789462598\u002Fai-hacker.en.png",{"id":189,"title":190,"summary":191,"published_at":192,"type":177,"link":193,"image_url":194},27,"Exposure Management: definition, stakes, and how it works","Vulnerabilities, misconfigurations, poorly managed identities: understand what Exposure Management is and why it matters in 2026.","2026-09-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdefinition-exposure-management","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F06170638a9-1789050834\u002Fexposure.management.definition.en.png",{"id":196,"title":197,"summary":198,"published_at":199,"type":185,"link":200,"image_url":201},26,"DGFiP Cyberattack 2026: Inside the Attacker","Two distinct attacks hit France","2026-08-17T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdgfip-cyberattack-2026-inside-attacker-mind","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fdc38d33696-1787055371\u002Fdgfip-2026.png",{"id":203,"title":204,"summary":205,"published_at":206,"type":169,"link":207,"image_url":208},25,"CVE-2026-64638: XSS2Shell, a WordPress Login Vulnerability","Pre-auth XSS on wp-login.php, patched August 6. What is actually exploitable, and how to read it in your Patrowl report.","2026-08-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fxss2shell-critical-wordpress-login-vulnerability-2026","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F904e61748b-1786369212\u002Fxss2shell.png",{"id":210,"title":211,"summary":211,"published_at":206,"type":169,"link":212,"image_url":213},24,"CVE-2026-64638 : XSS2Shell, faille du login WordPress","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fcve-2026-64638-xss2shell-faille-login-wordpress","",{"id":215,"title":216,"summary":217,"published_at":218,"type":169,"link":219,"image_url":220},23,"How Agentic AI Hunts Down CVEs Before Attackers Do","38 vulnerability sources monitored around the clock, pentester-validated proof of exploitability, an alert within hours. See how it works.","2026-08-05T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fproactive-threat-hunting-agentic-ai-cve","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F804988ce7b-1785930160\u002Fproactive-threat-hunting-how-agentic-ai-tracks-cves.png",{"id":222,"title":223,"summary":224,"published_at":225,"type":185,"link":226,"image_url":227},22,"AI Agent Incident: OpenAI HuggingFace — Risks and Lessons","An autonomous AI agent escaped its sandbox via a JFrog Artifactory zero-day, compromised HuggingFace via privilege escalation and stolen credentials. Reconstructed timeline and security lessons.","2026-07-31T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fai-agent-incident-openai-huggingface-risks","[Image URL from Kirby]",{"id":229,"title":230,"summary":231,"published_at":232,"type":177,"link":233,"image_url":234},21,"SaaS Under Watch: What Your SDLC Doesn","Your pipeline is green. Your real exposure may have changed without you knowing it. The complete guide for software vendors.","2026-07-29T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fsecuring-saas-application-software-vendor","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F20d6ec0cd0-1785331401\u002Fapplication-security.png"]