Skip to contentApache Http Server vulnerabilities
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...CVE-2017-7668Fix availableEPSS 57.5%7.5 High
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...CVE-2017-3169Fix availableEPSS 20.0%9.8 Critical
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...CVE-2017-3167Fix availableEPSS 20.2%9.8 Critical
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- apache http serverIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...CVE-2016-2161Fix availableEPSS 21.0%7.5 High
- apache http serverIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...CVE-2016-0736Public exploitFix availableEPSS 49.0%7.5 High
- apache http serverThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...CVE-2016-8740Public exploitFix availableEPSS 79.1%7.5 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- apache http serverThe Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not...CVE-2016-4979Fix availableEPSS 18.8%7.5 High
- apache http serverThe Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of...CVE-2016-1546Fix availableEPSS 15.9%5.9 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not...CVE-2015-0253EPSS 12.8%5.0 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...CVE-2015-3185Fix availableEPSS 16.3%4.3 Medium
- apache http serverThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...CVE-2015-3183Fix availableEPSS 74.4%5.0 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...CVE-2015-0228Fix availableEPSS 16.9%5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moremod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...CVE-2014-8109Fix availableEPSS 22.0%4.3 Medium
- apache http server, apple mac os x, os x server +1 more +3 moreThe handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP...CVE-2014-3583Fix availableEPSS 10.8%5.0 Medium
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- apache http serverMemory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the...CVE-2014-3523EPSS 16.8%5.0 Medium
- apache http serverThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...CVE-2013-4352Fix availableEPSS 11.5%4.3 Medium
- apache http serverThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...CVE-2014-0231Fix availableEPSS 44.7%5.0 Medium
- apache http server, debian linux, oracle enterprise manager ops center +2 more +4 moreRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...CVE-2014-0226Public exploitFix availableEPSS 85.8%6.8 Medium
- apache http server, debian linux, redhat jboss enterprise application platform +2 moreThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...CVE-2014-0118Fix availableEPSS 37.3%4.3 Medium
- apache http server, apple mac os x +1 moreThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...CVE-2014-0117Fix availableEPSS 35.7%4.3 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- apache http server, canonical ubuntu linux, oracle secure global desktop +2 moreThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2014-0098Fix availableEPSS 26.7%5.0 Medium
- apache http server, canonical ubuntu linux +1 moreThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...CVE-2013-6438Fix availableEPSS 27.5%5.0 Medium
- apache http servermod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds...CVE-2013-2249Fix availableEPSS 14.6%7.5 High
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...CVE-2013-1896Fix availableEPSS 29.5%4.3 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...CVE-2013-1862Fix availableEPSS 24.9%5.1 Medium
- apache http serverMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...CVE-2012-4558Fix availableEPSS 22.9%4.3 Medium
- apache http serverMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...CVE-2012-3499Fix availableEPSS 22.9%4.3 Medium
- apache http serverThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...CVE-2012-4557Fix availableEPSS 17.5%5.0 Medium
- apache http serverThe proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http...CVE-2012-35024.3 Medium
- apache http serverMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...CVE-2012-2687Fix availableEPSS 23.1%2.6 Low
- apache http server, opensuse +1 moreenvvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory...CVE-2012-0883Fix available6.9 Medium
- apache http server, debian linux, opensuse +8 more +10 moreprotocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header...CVE-2012-0053Public exploitFix availableEPSS 82.2%4.3 Medium
- apache http serverThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2012-0021Fix availableEPSS 30.3%2.6 Low
- apache http server, debian linux, opensuse +9 more +11 morescoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a...CVE-2012-0031Public exploitFix available4.6 Medium
- apache http serverThe Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon...CVE-2007-6750Public exploitFix availableEPSS 70.5%5.0 Medium
- apache http serverThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...CVE-2011-4317Public exploitFix availableEPSS 59.6%4.3 Medium
- apache http server, http server2.0a1, http server2.0a2 +7 more +9 moreThe mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when...CVE-2011-3639Public exploitFix availableEPSS 49.7%4.3 Medium
- apache http serverThe ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x...CVE-2011-4415Public exploitFix available1.2 Low
- apache http serverInteger overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x...CVE-2011-3607Public exploitFix available4.4 Medium
- apache http serverThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...CVE-2011-3368Public exploitFix availableEPSS 90.7%5.0 Medium
- apache http server, redhat jboss enterprise web server +1 moreThe mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with...CVE-2011-3348Fix availableEPSS 22.4%4.3 Medium
- apache http server, canonical ubuntu linux, opensuse +2 more +4 moreThe byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2...CVE-2011-3192Public exploitFix availableEPSS 98.9%7.8 High
- apache http server, apr-util +1 moreThe fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3...CVE-2011-1928Fix availableEPSS 10.3%4.3 Medium
- apache http server, portable runtime, apple mac os x +7 more +9 moreStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...CVE-2011-0419Public exploitFix availableEPSS 30.4%4.3 Medium
- apache apr-util, http server +1 moreMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...CVE-2010-1623Fix availableEPSS 20.3%5.0 Medium
- apache http servermod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend...CVE-2010-2791Fix available5.0 Medium
- Show moreLoading…