Skip to contentApache Http Server vulnerabilities
- apache http server, canonical ubuntu linux, debian linux +2 moreOff-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3...CVE-2006-3747Public exploitFix availableEPSS 97.1%7.6 High
- apache http server, canonical ubuntu linux, debian linux +2 more +4 morehttp_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache...CVE-2006-3918Public exploitFix availableEPSS 95.1%4.3 Medium
- apache http servermod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a...CVE-2005-3357Fix availableEPSS 24.3%5.4 Medium
- apache http serverCross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev...CVE-2005-3352Fix availableEPSS 73.7%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora core +3 more +5 moreMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...CVE-2005-2970Fix availableEPSS 14.2%5.0 Medium
- apache http server, canonical ubuntu linux, debian linux +2 moressl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global...CVE-2005-2700Fix availableEPSS 30.6%10.0 High
- apache http serverThe byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of...CVE-2005-2728Fix availableEPSS 11.0%5.0 Medium
- apache http server, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...CVE-2005-1268Fix available5.0 Medium
- apache http server, debian linux +1 moreThe Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy,...CVE-2005-2088Fix availableEPSS 20.5%4.3 Medium
- apache http serverBuffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a...CVE-2005-1344Public exploitFix availableEPSS 29.1%7.5 High
- apache http server** DISPUTED ** Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file...CVE-2004-2343Disputed7.2 High
- apache http serverThe check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or...CVE-2004-13872.1 Low
- apache http serverApache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2004-0942Public exploitFix availableEPSS 58.7%5.0 Medium
- apache http server, hp hp-ux, openpkg +2 more +4 moreBuffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local...CVE-2004-0940Public exploitFix available7.8 High
- apache http serverThe mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in...CVE-2004-0885Fix availableEPSS 15.4%7.5 High
- apache http serverUnknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which...CVE-2004-0811Fix available7.5 High
- apache http serverThe IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote...CVE-2004-0786Fix availableEPSS 24.1%5.0 Medium
- apache http serverBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a ...CVE-2004-0747Fix available7.8 High
- apache http server, debian linux, hp hp-ux +8 more +10 moreThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...CVE-2004-0809Fix availableEPSS 17.2%5.0 Medium
- apache http serverThe char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...CVE-2004-0751Public exploitFix availableEPSS 72.3%5.0 Medium
- apache http servermod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2004-0748Fix availableEPSS 24.7%5.0 Medium
- apache http serverPHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual...CVE-2004-02635.0 Medium
- apache http server, avaya converged communications server, s8300 +4 more +6 moreThe ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a...CVE-2004-0493Public exploitFix availableEPSS 84.8%6.4 Medium
- apache http server, hp virtualvault, vvos +3 more +5 moreHeap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote...CVE-2004-0492Fix availableEPSS 33.6%10.0 High
- apache http server, debian linux, redhat enterprise linux server +1 more +3 moreStack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...CVE-2004-0488Fix availableEPSS 37.7%7.5 High
- apache http serverDirectory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier,...CVE-2004-0173Public exploitEPSS 15.8%5.0 Medium
- apache http serverMemory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to...CVE-2004-0113Fix availableEPSS 11.0%5.0 Medium
- apache http servermod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not...CVE-2003-0993EPSS 10.8%7.5 High
- apache http serverApache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on...CVE-2004-0174EPSS 11.5%7.5 High
- apache http servermod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication...CVE-2004-1834Fix available2.1 Low
- apache http server, apple apache mod digest apple, avaya communication manager +10 more +12 moremod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the...CVE-2004-10827.5 High
- apache http servermod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by...CVE-2003-09877.5 High
- apache http serverApache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive...CVE-2003-14184.3 Medium
- apache http server** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write...CVE-2003-1307Public exploitDisputed4.3 Medium
- apache http servermod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI...CVE-2003-0789Fix availableEPSS 12.4%10.0 High
- apache http serverMultiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3...CVE-2003-0542Fix availableEPSS 30.4%7.2 High
- apache http serverThe rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly...CVE-2003-0460EPSS 13.4%5.0 Medium
- apache http serverApache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of...CVE-2003-0254Fix available5.0 Medium
- apache http serverThe prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept,...CVE-2003-0253Fix available5.0 Medium
- apache http serverApache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle ...CVE-2003-0192Fix available6.4 Medium
- apache http serverVulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for...CVE-2003-0245Public exploitFix availableEPSS 63.5%5.0 Medium
- apache http serverThe authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle...CVE-2003-0189Fix availableEPSS 15.1%5.0 Medium
- apache http serverUnknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45,...CVE-2003-0134Fix available5.0 Medium
- apache http serverA memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service ...CVE-2003-0132Public exploitFix availableEPSS 87.1%5.0 Medium
- apache http serverApache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape...CVE-2003-0083Fix availableEPSS 19.2%5.0 Medium
- apache http serverApache does not filter terminal escape sequences from its error logs, which could make it easier...CVE-2003-0020Fix availableEPSS 16.5%5.0 Medium
- apache http serverApache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via...CVE-2003-00175.0 Medium
- apache http serverApache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows...CVE-2003-0016EPSS 17.8%7.5 High
- apache tomcat, http server +1 moreApache Tomcat DoS via Malicious Get RequestCVE-2002-2272Public exploit7.8 High
- apache http serverApache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse...CVE-2002-21035.0 Medium
- Show moreLoading…