267 results · Feed
-
Unscored —CVE-2014-0231 EPSS 45%
The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote atta…
-
Unscored —CVE-2014-0117 EPSS 36%
The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote atta…
-
Unscored —CVE-2013-5704 EPSS 58%
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directi…
-
Unscored —CVE-2013-6438 EPSS 27%
The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not pro…
-
Unscored —CVE-2014-0098 EPSS 27%
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows …
-
Unscored —CVE-2013-2249 EPSS 15%
mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations fo…
-
Unscored —CVE-2013-1896 EPSS 29%
mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which a…
-
Unscored —CVE-2013-1862 EPSS 25%
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without…
-
Unscored —
The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid…
-
Unscored —CVE-2012-4558 EPSS 23%
Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_pr…
-
Unscored —CVE-2012-3499 EPSS 23%
Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before …
-
Unscored —CVE-2012-4557 EPSS 17%
The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon …
-
Unscored —CVE-2012-4929 Public exploit
The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…
-
Unscored —CVE-2012-2687 EPSS 23%
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_n…
-
Unscored —
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.…
-
Unscored —CVE-2012-0021 EPSS 30%
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.2…
-
Unscored —
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…
-
Unscored —CVE-2012-0031 Public exploit
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …
-
Unscored —
The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTT…
-
Unscored —
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, wh…
-
Unscored —
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 …
-
Unscored —CVE-2011-4415 Public exploit
The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when …
-
Unscored —CVE-2011-3607 Public exploit
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x t…
-
Unscored —
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…
-
Unscored —CVE-2011-3348 EPSS 22%
The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configur…
-
Unscored —
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote atta…
-
Unscored —
The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 f…
-
Unscored —CVE-2010-1623 EPSS 20%
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility libr…
-
Unscored —
mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeou…
-
Unscored —CVE-2010-1452 EPSS 21%
The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause…
-
Unscored —CVE-2010-0434 EPSS 18%
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded M…
-
Unscored —CVE-2010-0408 EPSS 21%
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 doe…
-
Unscored —
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does …
-
Unscored —
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to injec…
-
Critical 9.8
Apache Tomcat affected by vulnerability in TLS and SSL protocol
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…
-
Unscored —
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.…
-
Unscored —CVE-2009-3095 EPSS 14%
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and s…
-
Unscored —CVE-2009-1891 EPSS 17%
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associ…
-
Unscored —CVE-2009-1890 EPSS 16%
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when…
-
Unscored —
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOver…