Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...CVE-2009-1890Fix availableEPSS 16.2%7.1 High
- apache tomcatDirectory Traversal in Apache TomcatCVE-2008-5515Fix availableEPSS 18.7%5.0 Medium
- apache apr-util, http server, canonical ubuntu linux +2 moreOff-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big...CVE-2009-1956Fix availableEPSS 12.0%6.4 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2009-0783Fix available4.2 Medium
- apache tomcatExposure of Sensitive Information in Apache TomcatCVE-2009-0580Public exploitFix availableEPSS 94.4%4.3 Medium
- apache tomcatApache Tomcat Denial of Service via Malformed Request HeadersCVE-2009-0033EPSS 10.1%5.0 Medium
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...CVE-2009-1955Public exploitFix availableEPSS 53.0%7.5 High
- apache apr-util, http server +1 moreThe apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5...CVE-2009-0023Fix available4.3 Medium
- apache http serverThe Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options...CVE-2009-1195Fix available4.9 Medium
- apache http server, canonical ubuntu linux +1 moremod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote...CVE-2009-1191Fix availableEPSS 12.4%5.0 Medium
- apache geronimoApache Geronimo Application Server CSRF vulnerabilitiesCVE-2009-0039Public exploitFix availableEPSS 11.1%6.8 Medium
- apache geronimoApache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilitiesCVE-2009-0038Public exploitFix availableEPSS 18.0%4.3 Medium
- apache geronimoApache Geronimo Application Server multiple directory traversal vulnerabilitiesCVE-2008-5518Public exploitFix availableEPSS 35.9%9.4 High
- apache tilesApache Tiles Vulnerable to XSS via EL Expression InjectionCVE-2009-1275Fix available6.8 Medium
- apache strutsApache Struts is vulnerable to Cross-site ScriptingCVE-2008-6682Fix available4.3 Medium
- apache tomcat, mod jk +1 moreThe JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to...CVE-2008-5519Fix available2.6 Low
- apache strutsApache Struts Cross-site Scripting vulnerabilityCVE-2008-2025Fix available4.3 Medium
- apache struts, dojotoolkit dojo +1 moreApache Struts Dojo Plugin XSS VulnerabilityCVE-2007-6726Fix available4.3 Medium
- apache mod perlCross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in...CVE-2009-0796Public exploitFix availableEPSS 31.4%2.6 Low
- apache strutsApache Struts directory traversal vulnerabilityCVE-2008-6505Public exploitFix availableEPSS 72.7%5.0 Medium
- apache struts, opensymphony xwork +1 moreImproper Input Validation in OpenSymphony XWorkCVE-2008-6504Public exploitFix availableEPSS 38.6%5.0 Medium
- apache tomcatCross-site scripting in Apache TomcatCVE-2009-0781Fix available4.3 Medium
- apache tomcatApache Tomcat information disclosure vulnerabilityCVE-2008-4308Fix available2.6 Low
- apache jackrabbitApache Jackrabbit contains Cross-site ScriptingCVE-2009-0026Public exploitFix availableEPSS 26.8%4.3 Medium
- apache tomcatApache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address...CVE-2008-32714.3 Medium
- apache xerces-c\+\+The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of...CVE-2008-44827.8 High
- apache openoffice, fedoraproject fedora +1 moreInteger overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the...CVE-2008-3282Fix availableEPSS 10.8%7.8 High
- apache tomcatApache Tomcat Directory Traversal vulnerabilityCVE-2008-2938Public exploitFix availableEPSS 99.7%4.3 Medium
- apache http server, apple mac os x, canonical ubuntu linux +1 more +3 moreCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...CVE-2008-2939Fix availableEPSS 39.0%4.3 Medium
- apache tomcatApache Tomcat Path Traversal VulnerabilityCVE-2008-2370Public exploitFix availableEPSS 52.7%5.0 Medium
- apache tomcatApache Tomcat Cross-site scripting (XSS) vulnerabilityCVE-2008-1232Public exploitFix availableEPSS 75.9%4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...CVE-2008-2364Fix availableEPSS 12.7%5.0 Medium
- typo3, apache webserver +1 moreTYPO3 Unrestricted File Upload vulnerabilityCVE-2008-2717Fix available6.5 Medium
- apache tomcatApache Tomcat Cross-site scripting (XSS) vulnerabilityCVE-2008-1947Fix available4.3 Medium
- apache http serverCross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to...CVE-2008-2168Public exploitFix availableEPSS 54.9%4.3 Medium
- apache mod jk, f5 big-ip +1 moreMultiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module...CVE-2007-6258Public exploitEPSS 41.5%7.5 High
- apache geronimoThe init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown...CVE-2008-07322.1 Low
- apache tomcatApache Tomcat Sensitive Information DisclosureCVE-2008-0002Fix available5.8 Medium
- apache tomcatApache Tomcat Does Not Properly Handle Empty RequestsCVE-2007-62864.3 Medium
- apache tomcatExposure of Sensitive Information in Apache TomcatCVE-2007-5333Public exploitFix availableEPSS 62.6%5.0 Medium
- apache http server, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreCRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and...CVE-2008-0456EPSS 19.0%2.6 Low
- apache http server, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...CVE-2008-0455Public exploitFix availableEPSS 64.9%4.3 Medium
- apache tomcatThe SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5...CVE-2008-0128Public exploitEPSS 19.6%5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +2 moremod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...CVE-2008-0005Fix availableEPSS 14.7%4.3 Medium
- apache http server** DISPUTED ** Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x...CVE-2007-6423Disputed7.8 High
- apache http server, canonical ubuntu linux +1 moreCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...CVE-2007-6420Fix available4.3 Medium
- apache http serverCross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache...CVE-2007-6421Fix available3.5 Low
- apache http serverThe balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6...CVE-2007-6422Fix available4.0 Medium
- apache http serverCross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...CVE-2007-6388Fix availableEPSS 75.9%4.3 Medium
- apache tomcatJULI logging component in Apache Tomcat does not restrict certain permissions for web applicationsCVE-2007-53426.4 Medium
- Show moreLoading…