267 results · Feed
-
Unscored —
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP …
-
Unscored —CVE-2004-0885 EPSS 15%
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location …
-
Unscored —
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to …
-
Unscored —CVE-2004-0786 EPSS 24%
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a d…
-
High 7.8
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that cau…
-
Unscored —CVE-2004-0809 EPSS 17%
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process cra…
-
Unscored —
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allow…
-
Unscored —CVE-2004-0748 EPSS 25%
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting…
-
Unscored —CVE-2004-0113 EPSS 11%
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of servi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26,…
-
Unscored —CVE-2002-1156 EPSS 15%
Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with bo…
-
Unscored —CVE-2003-0020 EPSS 16%
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to inser…
-
Unscored —
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memo…
-
Unscored —CVE-2004-0488 EPSS 38%
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is …
-
Unscored —CVE-2003-0789 EPSS 12%
mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could c…
-
Unscored —CVE-2003-0542 EPSS 30%
Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to …
-
Unscored —
Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of pe…
-
Unscored —
The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a de…
-
Unscored —
Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by…
-
Unscored —CVE-2003-0189 EPSS 15%
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using t…
-
Unscored —
Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.4…
-
Unscored —
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) vi…
-
Unscored —
Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to…
-
Unscored —
Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and poss…
-
Unscored —CVE-2003-0083 EPSS 19%
Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access…
-
Unscored —
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the se…
-
Unscored —
Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to …