Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tomcatApache Tomcat Reveals DirectoriesCVE-2006-3835Public exploitFix availableEPSS 48.1%5.0 Medium
- apache spamassassinSpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote...CVE-2006-2447Public exploitFix availableEPSS 75.8%5.1 Medium
- apache jamesThe SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote...CVE-2006-28067.8 High
- apache strutsCross-site scripting in Apache StrutsCVE-2006-1548Fix available4.3 Medium
- apache struts, struts 1 +1 moreImproper Input Validation in Apache StrutsCVE-2006-1547In KEVFix availableEPSS 54.6%7.5 High
- apache strutsApache Struts vulnerable to Improper Input ValidationCVE-2006-1546Fix available7.5 High
- apache log4netApache log4net format string vulnerability causes DoSCVE-2006-0743Fix available5.0 Medium
- apache mod pythonDirectory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache...CVE-2006-10957.2 High
- apache libapreq2, debian linux +1 moreUnspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in...CVE-2006-0042Fix available5.0 Medium
- apache geronimoApache Geronimo console 1.0 vulnerable to cross-site scriptingCVE-2006-0254Public exploitFix availableEPSS 32.2%4.3 Medium
- apache derbyApache Derby exposes user and password attributesCVE-2005-4849Fix available5.0 Medium
- apache tomcatMultiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta...CVE-2005-48384.3 Medium
- apache tomcatApache Tomcat allows remote attackers to read JSP source filesCVE-2005-48367.8 High
- apache tomcatApache Tomcat Discloses MS-DOS PathnameCVE-2005-4703Public exploitEPSS 25.7%5.0 Medium
- apache http servermod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a...CVE-2005-3357Fix availableEPSS 24.3%5.4 Medium
- apache http serverCross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev...CVE-2005-3352Fix availableEPSS 73.7%4.3 Medium
- apache strutsApache Struts Cross-site scripting VulnerabilityCVE-2005-3745Public exploitEPSS 25.7%4.3 Medium
- apache spamassassinSpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of...CVE-2005-3351Fix available5.0 Medium
- apache tomcatApache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous RequestsCVE-2005-3510Fix available5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora core +3 more +5 moreMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...CVE-2005-2970Fix availableEPSS 14.2%5.0 Medium
- apache tomcat, hitachi cosminexus application server +1 moreApache Tomcat AJP Connector Information LeakCVE-2005-31642.6 Low
- apache http server, canonical ubuntu linux, debian linux +2 moressl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global...CVE-2005-2700Fix availableEPSS 30.6%10.0 High
- apache http serverThe byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of...CVE-2005-2728Fix availableEPSS 11.0%5.0 Medium
- apache http server, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...CVE-2005-1268Fix available5.0 Medium
- apache tomcatTomcat Vulnerable to Web Cache PoisoningCVE-2005-2090EPSS 26.1%4.3 Medium
- apache http server, debian linux +1 moreThe Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy,...CVE-2005-2088Fix availableEPSS 20.5%4.3 Medium
- apache spamassassinApache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service ...CVE-2005-1266Fix available5.0 Medium
- apache http serverBuffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a...CVE-2005-1344Public exploitFix availableEPSS 29.1%7.5 High
- apache tomcatApache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash)...CVE-2005-0808EPSS 23.4%5.0 Medium
- apache mod pythonThe publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access...CVE-2005-0088Fix available7.5 High
- apache mod auth radiusApache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to...CVE-2005-0108Fix available5.0 Medium
- apache mod pythonmod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters...CVE-2004-2680Fix available5.0 Medium
- apache jamesApache James Denial of ServiceCVE-2004-2650Fix available4.9 Medium
- apache http server** DISPUTED ** Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file...CVE-2004-2343Disputed7.2 High
- apache xerces-c\+\+The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU...CVE-2004-15755.0 Medium
- apache http serverThe check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or...CVE-2004-13872.1 Low
- apache http serverApache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2004-0942Public exploitFix availableEPSS 58.7%5.0 Medium
- apache http server, hp hp-ux, openpkg +2 more +4 moreBuffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local...CVE-2004-0940Public exploitFix available7.8 High
- apache http serverThe mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in...CVE-2004-0885Fix availableEPSS 15.4%7.5 High
- apache http serverUnknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which...CVE-2004-0811Fix available7.5 High
- apache http serverThe IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote...CVE-2004-0786Fix availableEPSS 24.1%5.0 Medium
- apache http serverBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a ...CVE-2004-0747Fix available7.8 High
- apache http server, debian linux, hp hp-ux +8 more +10 moreThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...CVE-2004-0809Fix availableEPSS 17.2%5.0 Medium
- apache http serverThe char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying...CVE-2004-0751Public exploitFix availableEPSS 72.3%5.0 Medium
- apache http servermod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2004-0748Fix availableEPSS 24.7%5.0 Medium
- apache http serverPHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual...CVE-2004-02635.0 Medium
- apache http server, avaya converged communications server, s8300 +4 more +6 moreThe ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a...CVE-2004-0493Public exploitFix availableEPSS 84.8%6.4 Medium
- apache http server, hp virtualvault, vvos +3 more +5 moreHeap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote...CVE-2004-0492Fix availableEPSS 33.6%10.0 High
- apache http server, debian linux, redhat enterprise linux server +1 more +3 moreStack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...CVE-2004-0488Fix availableEPSS 37.7%7.5 High
- apache http serverDirectory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier,...CVE-2004-0173Public exploitEPSS 15.8%5.0 Medium
- Show moreLoading…