Skip to contentApache Http Server vulnerabilities
- apache http serverPHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows...CVE-2002-2029Public exploitEPSS 23.1%7.5 High
- apache http serverUnknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote...CVE-2002-20125.0 Medium
- apache http servermod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a...CVE-2002-1850Public exploitFix availableEPSS 17.4%7.5 High
- apache http serverBuffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary...CVE-2002-16584.6 Medium
- apache http serverA regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian...CVE-2002-12332.6 Low
- apache http serverApache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request...CVE-2002-1156Fix availableEPSS 14.9%5.0 Medium
- apache http server, oracle application server, database server +2 more +4 moreCross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43,...CVE-2002-0840Public exploitFix availableEPSS 95.1%6.8 Medium
- apache http server, oracle application server, database server +1 more +3 moreBuffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and...CVE-2002-0843EPSS 21.4%7.5 High
- apache http server, debian linux +1 moreThe shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user...CVE-2002-08397.2 High
- apache http servermod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote...CVE-2002-1593Fix available5.0 Medium
- apache http serverApache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the...CVE-2002-0654Public exploitFix availableEPSS 58.7%5.0 Medium
- apache http serverDirectory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware...CVE-2002-0661Public exploitFix availableEPSS 69.7%7.5 High
- apache http server, debian linux +1 moreApache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a...CVE-2002-0392Public exploitFix availableEPSS 95.2%7.5 High
- apache http serverThe ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an...CVE-2002-1592Fix availableEPSS 12.5%5.0 Medium
- usanet creations makebid auction deluxe, apache http server +1 moreCross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote...CVE-2002-02577.5 High
- apache http serverPHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote...CVE-2002-02495.0 Medium
- apache http serverPHP, when installed with Apache and configured to search for index.php as a default web page,...CVE-2002-02405.0 Medium
- apache http serverApache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute...CVE-2002-0061Public exploitEPSS 51.5%7.5 High
- apache http serverThe log files in Apache web server contain information directly supplied by clients and does not...CVE-2001-15565.0 Medium
- apache http servermod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable...CVE-2001-15342.1 Low
- mandrakesoft mandrake linux, apache http server, mandrakesoft mandrake linux corporate server +1 more +3 moreThe default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux...CVE-2001-14497.5 High
- apache http serversplit-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in...CVE-2001-0730EPSS 11.9%5.0 Medium
- apache http serverApache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass...CVE-2001-0766Public exploit9.8 Critical
- apache http serverApache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and...CVE-2001-07295.0 Medium
- apache http serverApache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and...CVE-2001-0731Public exploitEPSS 56.8%5.0 Medium
- apache http serverApache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass...CVE-2001-10725.0 Medium
- apache http serverApache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of...CVE-2001-1342EPSS 30.0%5.0 Medium
- apache http server, debian linux +1 moreThe default installation of Apache before 1.3.19 allows remote attackers to list directories...CVE-2001-0925Public exploitEPSS 75.2%5.0 Medium
- apache http serverPHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. ...CVE-2001-0042Public exploit5.0 Medium
- apache http server, debian linux +1 morehtpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite...CVE-2001-01313.3 Low
- apache http servermod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a...CVE-2000-0913EPSS 35.6%5.0 Medium
- suse linux, apache http server +1 moreThe default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote...CVE-2000-0869Public exploitEPSS 50.9%5.0 Medium
- suse linux, apache http server +1 moreThe default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read...CVE-2000-0868EPSS 44.7%5.0 Medium
- apache http serverVulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12...CVE-2000-1204EPSS 10.4%5.0 Medium
- apache http serverThe Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory...CVE-2000-0505Public exploitEPSS 46.7%5.0 Medium
- apache http serverCross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to...CVE-2000-1205EPSS 23.6%4.3 Medium
- apache http servermod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via...CVE-1999-129310.0 High
- apache http serverThe Apache web server for Win32 may provide access to restricted files when a . (dot) is appended...CVE-1999-02895.0 Medium
- matt wright guestbook, apache http server +1 moreguestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->"...CVE-1999-1053Public exploitEPSS 85.2%7.5 High
- apache http serverApache allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-0926Public exploit10.0 High
- apache http serverVulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using...CVE-2000-12065.0 Medium
- apache http serverMultiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache:...CVE-1999-123710.0 High
- apache http server, apple macos +1 moreA possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote...CVE-1999-1412Public exploitEPSS 35.9%5.0 Medium
- apache http serverA default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which...CVE-1999-0678Public exploitEPSS 31.4%5.0 Medium
- apache http serverApache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service ...CVE-1999-119910.0 High
- apache http serverBuffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service...CVE-1999-0107Public exploitEPSS 19.9%5.0 Medium
- apache http serverApache httpd cookie buffer overflow for versions 1.1.1 and earlier.CVE-1999-00717.5 High
- apache http server, illinois ncsa httpd +1 moreScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.CVE-1999-0236Public exploitEPSS 25.8%7.5 High
- apache http server, netscape commerce server, communications server +1 more +3 moreList of arbitrary files on Web host via nph-test-cgi script.CVE-1999-0045Public exploitEPSS 26.0%7.5 High
- apache http servertest-cgi program allows an attacker to list files on the server.CVE-1999-0070Public exploitEPSS 29.6%5.0 Medium
- Show moreLoading…