Skip to contentApache Http Server vulnerabilities
- apache http serverThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...CVE-2010-1452Fix availableEPSS 21.4%5.0 Medium
- apache http servermod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha,...CVE-2010-2068EPSS 16.0%5.0 Medium
- apache http serverRace condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers...CVE-2010-11516.8 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreThe ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...CVE-2010-0434Fix availableEPSS 18.4%4.3 Medium
- apache http server, broadcom vmware ace management server, ibm websphere application server +2 moremodules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2...CVE-2010-0425Public exploitEPSS 94.2%10.0 High
- apache http serverThe ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2...CVE-2010-0408Fix availableEPSS 20.9%5.0 Medium
- apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows...CVE-2003-15812.6 Low
- apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a...CVE-2003-15804.3 Medium
- apache http serverInteger overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the...CVE-2010-0010EPSS 43.4%6.8 Medium
- libexpat project libexpat, apache http server +1 moreThe big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig...CVE-2009-3560Fix availableEPSS 24.3%5.0 Medium
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- libexpat project libexpat, apache http server +1 moreThe updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,...CVE-2009-3720Fix availableEPSS 27.9%5.0 Medium
- apache http server, portable runtime +1 moreThe Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable...CVE-2009-2699EPSS 14.2%7.5 High
- apache http server, apple mac os x, debian linux +4 more +6 moreThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...CVE-2009-3095Fix availableEPSS 13.5%5.0 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...CVE-2009-3094Fix available2.6 Low
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...CVE-2009-1891Fix availableEPSS 17.1%7.1 High
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...CVE-2009-1890Fix availableEPSS 16.2%7.1 High
- apache apr-util, http server, canonical ubuntu linux +2 moreOff-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big...CVE-2009-1956Fix availableEPSS 12.0%6.4 Medium
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...CVE-2009-1955Public exploitFix availableEPSS 53.0%7.5 High
- apache apr-util, http server +1 moreThe apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5...CVE-2009-0023Fix available4.3 Medium
- apache http serverThe Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options...CVE-2009-1195Fix available4.9 Medium
- apache http server, canonical ubuntu linux +1 moremod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote...CVE-2009-1191Fix availableEPSS 12.4%5.0 Medium
- apache http server, apple mac os x, canonical ubuntu linux +1 more +3 moreCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...CVE-2008-2939Fix availableEPSS 39.0%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...CVE-2008-2364Fix availableEPSS 12.7%5.0 Medium
- apache http serverCross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to...CVE-2008-2168Public exploitFix availableEPSS 54.9%4.3 Medium
- apache http server, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreCRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and...CVE-2008-0456EPSS 19.0%2.6 Low
- apache http server, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...CVE-2008-0455Public exploitFix availableEPSS 64.9%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +2 moremod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...CVE-2008-0005Fix availableEPSS 14.7%4.3 Medium
- apache http server** DISPUTED ** Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x...CVE-2007-6423Disputed7.8 High
- apache http server, canonical ubuntu linux +1 moreCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...CVE-2007-6420Fix available4.3 Medium
- apache http serverCross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache...CVE-2007-6421Fix available3.5 Low
- apache http serverThe balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6...CVE-2007-6422Fix available4.0 Medium
- apache http serverCross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...CVE-2007-6388Fix availableEPSS 75.9%4.3 Medium
- apache http serverApache HTTP Server, when running on Linux with a document root on a Windows share mounted using...CVE-2007-6514Public exploitEPSS 38.0%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- apache http serverApache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an...CVE-2007-6203Public exploitFix availableEPSS 80.7%4.3 Medium
- apache http serverCross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...CVE-2007-4465Fix availableEPSS 26.2%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...CVE-2007-3847Fix availableEPSS 12.9%5.0 Medium
- apache http server, apple mac os x server +1 morecache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a...CVE-2007-1863Fix availableEPSS 11.8%5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...CVE-2006-5752Fix availableEPSS 27.8%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreApache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a...CVE-2007-3304Fix available4.7 Medium
- apache http serverApache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial...CVE-2007-33034.9 Medium
- apache http serverThe recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of...CVE-2007-18625.0 Medium
- apache http serversuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on...CVE-2007-17434.4 Medium
- apache http serversuexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the...CVE-2007-1742Fix available3.7 Low
- apache http serverMultiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file...CVE-2007-1741Fix available6.2 Medium
- apache http server, tomcat +1 moreApache Tomcat Directory TraversalCVE-2007-0450Public exploitFix availableEPSS 91.2%5.0 Medium
- apache http server** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large...CVE-2007-0086DisputedEPSS 10.2%7.8 High
- apache http serverFormat string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent...CVE-2006-4154EPSS 16.7%6.8 Medium
- apache http serverApache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI...CVE-2006-4110Public exploitEPSS 40.0%4.3 Medium
- Show moreLoading…