modsecurity vulnerabilities (Bitnami)
17 vulnerabilities.
-
modsecurityBitnami ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass 8.6 High -
modsecurityBitnami ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture 5.8 Medium -
modsecurityBitnami ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators 8.2 High -
modsecurityBitnami libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings 8.2 High -
modsecurityBitnami ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure 6.9 Medium -
modsecurityBitnami ModSecurity empty XML tag causes segmentation fault 6.5 Medium -
modsecurityBitnami ModSecurity has possible DoS vulnerability in sanitiseArg action 7.5 High -
modsecurityBitnami ModSecurity Has Possible DoS Vulnerability 7.5 High -
modsecurityBitnami Libmodsecurity3 has possible bypass of encoded HTML entities 7.9 High -
modsecurityBitnami A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via... 7.5 High -
modsecurityBitnami WAF bypass of the ModSecurity v3 release line 8.6 High -
modsecurityBitnami Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity. 7.5 High -
modsecurityBitnami Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash... 7.5 High -
modsecurityBitnami In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... 7.5 High -
modsecurityBitnami In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... 7.5 High -
modsecurityBitnami ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects... 7.5 High -
modsecurityBitnami ** DISPUTED ** Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special... 7.5 High