Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache http serverMemory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to...CVE-2004-0113Fix availableEPSS 11.0%5.0 Medium
- apache http servermod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not...CVE-2003-0993EPSS 10.8%7.5 High
- apache http serverApache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on...CVE-2004-0174EPSS 11.5%7.5 High
- apache http servermod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication...CVE-2004-1834Fix available2.1 Low
- apache mod pythonUnknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service ...CVE-2004-00965.0 Medium
- apache http server, apple apache mod digest apple, avaya communication manager +10 more +12 moremod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the...CVE-2004-10827.5 High
- apache http servermod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by...CVE-2003-09877.5 High
- apache http serverApache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive...CVE-2003-14184.3 Medium
- apache http server** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write...CVE-2003-1307Public exploitDisputed4.3 Medium
- apache cocoonDirectory traversal vulnerability in the view-source sample file in Apache Software Foundation...CVE-2003-1172Public exploitEPSS 30.8%5.0 Medium
- apache mod pythonUnknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote...CVE-2003-0973Fix available5.0 Medium
- apache http servermod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI...CVE-2003-0789Fix availableEPSS 12.4%10.0 High
- apache http serverMultiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3...CVE-2003-0542Fix availableEPSS 30.4%7.2 High
- apache tomcatApache Tomcat Denial of Service vulnerability in the Catalina packageCVE-2003-0866Public exploitFix availableEPSS 34.8%5.0 Medium
- apache tomcatApache Tomcat XSS VulnerabilityCVE-2002-1567Public exploitFix availableEPSS 27.1%6.8 Medium
- apache http serverThe rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly...CVE-2003-0460EPSS 13.4%5.0 Medium
- apache http serverApache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of...CVE-2003-0254Fix available5.0 Medium
- apache http serverThe prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept,...CVE-2003-0253Fix available5.0 Medium
- apache http serverApache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle ...CVE-2003-0192Fix available6.4 Medium
- apache http serverVulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for...CVE-2003-0245Public exploitFix availableEPSS 63.5%5.0 Medium
- apache http serverThe authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle...CVE-2003-0189Fix availableEPSS 15.1%5.0 Medium
- apache http serverUnknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45,...CVE-2003-0134Fix available5.0 Medium
- apache http serverA memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service ...CVE-2003-0132Public exploitFix availableEPSS 87.1%5.0 Medium
- apache http serverApache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape...CVE-2003-0083Fix availableEPSS 19.2%5.0 Medium
- apache http serverApache does not filter terminal escape sequences from its error logs, which could make it easier...CVE-2003-0020Fix availableEPSS 16.5%5.0 Medium
- apache tomcatJakarta Tomcat Denial of Service vulnerabilityCVE-2003-0045Fix available5.0 Medium
- apache http serverApache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via...CVE-2003-00175.0 Medium
- apache http serverApache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows...CVE-2003-0016EPSS 17.8%7.5 High
- apache tomcatJakarta Tomcat cross-site scripting (XSS) vulnerabilityCVE-2003-0044Fix available6.8 Medium
- apache tomcatTomcat uses trusted privileges when processing web.xml fileCVE-2003-0043Fix available5.0 Medium
- apache tomcatJakarta Tomcat Directory Listing vulnerabilityCVE-2003-0042Public exploitFix availableEPSS 46.0%5.0 Medium
- apache tomcatApache Tomcat Source Code DisclosureCVE-2002-1394Fix available7.5 High
- apache tomcat, http server +1 moreApache Tomcat DoS via Malicious Get RequestCVE-2002-2272Public exploit7.8 High
- apache http serverApache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse...CVE-2002-21035.0 Medium
- apache http serverPHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows...CVE-2002-2029Public exploitEPSS 23.1%7.5 High
- apache http serverUnknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote...CVE-2002-20125.0 Medium
- apache tomcatApache Tomcat Leaks Pathname Information via Error MessageCVE-2002-20095.0 Medium
- apache tomcatApache Tomcat Leaks Information via Error MessageCVE-2002-2008Fix available5.0 Medium
- apache tomcatThe default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain...CVE-2002-2007Public exploitEPSS 41.4%5.0 Medium
- apache tomcatApache Tomcat Default Installation Reveals Sensitive InformationCVE-2002-2006Public exploitFix availableEPSS 30.7%5.0 Medium
- apache tomcatThe servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3...CVE-2002-18955.0 Medium
- apache http servermod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a...CVE-2002-1850Public exploitFix availableEPSS 17.4%7.5 High
- apache http serverBuffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary...CVE-2002-16584.6 Medium
- apache http serverA regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian...CVE-2002-12332.6 Low
- apache http serverApache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request...CVE-2002-1156Fix availableEPSS 14.9%5.0 Medium
- apache http server, oracle application server, database server +2 more +4 moreCross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43,...CVE-2002-0840Public exploitFix availableEPSS 95.1%6.8 Medium
- apache http server, oracle application server, database server +1 more +3 moreBuffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and...CVE-2002-0843EPSS 21.4%7.5 High
- apache http server, debian linux +1 moreThe shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user...CVE-2002-08397.2 High
- apache tomcatApache Tomcat DoS Via Requests Including Null CharactersCVE-2002-0935Fix available5.0 Medium
- apache tomcatApache Tomcat Source Code DisclosureCVE-2002-1148Public exploitFix availableEPSS 18.6%5.0 Medium
- Show moreLoading…