Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache http serverApache HTTP Server, when running on Linux with a document root on a Windows share mounted using...CVE-2007-6514Public exploitEPSS 38.0%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- apache http serverApache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an...CVE-2007-6203Public exploitFix availableEPSS 80.7%4.3 Medium
- apache geronimoSQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent...CVE-2007-57977.5 High
- apache jakarta slideAbsolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote...CVE-2007-5731Public exploit3.5 Low
- apache tomcatApache Tomcat Path Traversal VulnerabilityCVE-2007-5461Public exploitEPSS 39.7%3.5 Low
- apache geronimoUnspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows...CVE-2007-50855.0 Medium
- apache openoffice, sun staroffice, starsuite +2 more +4 moreInteger overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7,...CVE-2007-2834Fix availableEPSS 12.0%9.3 High
- apache http serverCross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...CVE-2007-4465Fix availableEPSS 26.2%4.3 Medium
- apache tomcatApache Tomcat Example Application CSRF and XSS VulnerabilitiesCVE-2007-47244.3 Medium
- apache geronimoThe login method in LoginModule implementations in Apache Geronimo 2.0 does not throw...CVE-2007-454810.0 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...CVE-2007-3847Fix availableEPSS 12.9%5.0 Medium
- apache tomcatCross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6...CVE-2007-3386Public exploitEPSS 59.0%4.3 Medium
- apache tomcatApache Tomcat Mishandles Character Sequence in CookiesCVE-2007-3385EPSS 16.9%4.3 Medium
- apache tomcatApache Tomcat treats single quotes as delimiters in cookiesCVE-2007-3382Public exploitEPSS 37.5%4.3 Medium
- apache tomcatApache Tomcat's CookieExample Vulnerable to XSSCVE-2007-33844.3 Medium
- apache tomcatApache Tomcat SendMailServlet XSSCVE-2007-33834.3 Medium
- apache derbyApache Derby SQL InjectionCVE-2006-7217Fix available4.0 Medium
- apache derbyApache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements...CVE-2006-72164.0 Medium
- apache http server, apple mac os x server +1 morecache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a...CVE-2007-1863Fix availableEPSS 11.8%5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...CVE-2006-5752Fix availableEPSS 27.8%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreApache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a...CVE-2007-3304Fix available4.7 Medium
- apache http serverApache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial...CVE-2007-33034.9 Medium
- apache myfaces tomahawkMultiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces...CVE-2007-3101Public exploitEPSS 44.5%4.3 Medium
- apache tomcatApache Tomcat vulnerable to Cross-site ScriptingCVE-2007-2450Fix available3.5 Low
- apache tomcatApache Tomcat XSS Vulnerabilities in Examples Web ApplicationCVE-2007-2449Public exploitEPSS 77.4%4.3 Medium
- apache http serverThe recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of...CVE-2007-18625.0 Medium
- apache tomcat jk web server connectormod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within...CVE-2007-1860Fix availableEPSS 13.2%5.0 Medium
- apache tomcatApache Tomcat Vulnerable to Cross-Site ScriptingCVE-2007-1355Public exploitFix availableEPSS 58.2%4.3 Medium
- apache tomcatThe default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30...CVE-2007-1858Public exploitEPSS 18.3%2.6 Low
- apache tomcatApache Tomcat XSS In Accept-Language HeadersCVE-2007-1358EPSS 19.9%2.6 Low
- apache tomcatCross-site scripting in Apache TomcatCVE-2006-7196Public exploitFix availableEPSS 72.2%4.3 Medium
- apache tomcatApache Tomcat XSS VulnerabilityCVE-2006-7195Fix available4.3 Medium
- apache axisApache Axis allows Exposure of Sensitive Information to an Unauthorized ActorCVE-2007-2353Public exploitFix availableEPSS 27.7%5.0 Medium
- apache tomcatApache Tomcat Buffer Over-ReadCVE-2006-71977.8 High
- apache http serversuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on...CVE-2007-17434.4 Medium
- apache http serversuexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the...CVE-2007-1742Fix available3.7 Low
- apache http serverMultiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file...CVE-2007-1741Fix available6.2 Medium
- apache mod perl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not...CVE-2007-1349Fix availableEPSS 10.4%5.0 Medium
- apache http server, tomcat +1 moreApache Tomcat Directory TraversalCVE-2007-0450Public exploitFix availableEPSS 91.2%5.0 Medium
- apache tomcat jk web server connectorStack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c)...CVE-2007-0774Public exploitFix availableEPSS 81.6%7.5 High
- apache spamassassinApache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long...CVE-2007-0451Fix available4.3 Medium
- apache http server** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large...CVE-2007-0086DisputedEPSS 10.2%7.8 High
- apache ofbiz, opentaps +1 moreCross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open...CVE-2006-65896.8 Medium
- apache ofbizThe forum implementation in the ecommerce component in the Apache Open For Business Project ...CVE-2006-65887.5 High
- apache ofbizCross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component...CVE-2006-65876.8 Medium
- apache http serverFormat string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent...CVE-2006-4154EPSS 16.7%6.8 Medium
- apache http serverApache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI...CVE-2006-4110Public exploitEPSS 41.7%4.3 Medium
- apache http server, canonical ubuntu linux, debian linux +2 moreOff-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3...CVE-2006-3747Public exploitFix availableEPSS 97.1%7.6 High
- apache http server, canonical ubuntu linux, debian linux +2 more +4 morehttp_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache...CVE-2006-3918Public exploitFix availableEPSS 95.1%4.3 Medium
- Show moreLoading…