267 results · Feed
-
Unscored —CVE-2009-1191 EPSS 12%
mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitiv…
-
Unscored —CVE-2008-2939 EPSS 39%
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and m…
-
Unscored —
Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allow…
-
Unscored —CVE-2008-2364 EPSS 13%
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.6…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-0456 EPSS 19%
CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x ser…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in t…
-
Unscored —CVE-2008-0005 EPSS 15%
mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 thro…
-
Unscored —
The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Mult…
-
Unscored —CVE-2007-6388 EPSS 76%
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.…
-
Unscored —CVE-2007-5000 EPSS 47%
Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and …
-
Unscored —
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is r…
-
Medium 6.1CVE-2007-4465 EPSS 26%
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on…
-
Unscored —CVE-2007-3847 EPSS 13%
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows rem…
-
Unscored —CVE-2006-5752 EPSS 28%
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when E…
-
Unscored —CVE-2007-1863 EPSS 12%
cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Proces…
-
Unscored —
Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by …
-
Unscored —
Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain…
-
Unscored —
suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the current directory is wit…
-
Unscored —
suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, whic…
-
Unscored —
Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their…
-
Unscored —CVE-2007-0086 EPSS 10%
The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cau…
-
Unscored —CVE-2003-1307 Public exploit
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to th…
-
Unscored —
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and …
-
Unscored —
http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 befor…
-
Unscored —CVE-2005-3357 EPSS 24%
mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error …
-
Unscored —CVE-2005-3352 EPSS 74%
Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.…
-
Unscored —CVE-2005-2970 EPSS 14%
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a den…
-
Unscored —CVE-2005-2700 EPSS 31%
ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configur…
-
Unscored —CVE-2005-2728 EPSS 11%
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumpt…
-
Unscored —
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to u…
-
Unscored —
mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP ad…
-
Unscored —CVE-2005-2088 EPSS 20%
The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to…
-
Unscored —
mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang…
-
Unscored —
mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard di…
-
Unscored —
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N…
-
Unscored —
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a c…
-
Unscored —CVE-2002-1592 EPSS 12%
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error message…