Skip to contentOracle Http Server vulnerabilities
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL...CVE-2021-356665.9 Medium
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...CVE-2021-24803.7 Low
- openbsd openssh, fedoraproject fedora, netapp active iq unified manager +14 more +16 moresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...CVE-2021-41617Public exploitFix available7.0 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflowCVE-2021-39275Fix availableEPSS 39.4%9.8 Critical
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- apache portable runtime, portable runtime (apr), oracle http server +2 moreRegression of CVE-2017-12613CVE-2021-35940Fix available7.1 High
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...CVE-2021-23155.4 Medium
- dell bsafe micro edition suite, bsafe micro-edition-suite, oracle database +3 more +5 moreDell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read...CVE-2020-53607.5 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...CVE-2020-29526.5 Medium
- oracle http server, oracle corporation security service +1 moreVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL...CVE-2020-25455.3 Medium
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...CVE-2020-25306.1 Medium
- http server project server, oracle http server +1 moreCross-Site Scripting in http_serverCVE-2019-156007.5 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- apache http server, oracle communications element manager, communications session report manager +4 more +6 moreIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...CVE-2019-10097Fix availableEPSS 52.9%7.2 High
- apache http server, oracle communications element manager, enterprise manager ops center +2 more +4 moreIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...CVE-2019-10082Fix availableEPSS 16.5%9.1 Critical
- ibm http serverVulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OHS...CVE-2019-27515.9 Medium
- curl, netapp oncommand insight, oncommand unified manager +9 more +11 moreA non-privileged user or program can put code and a config file in a known non-privileged path ...CVE-2019-54437.8 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- ibm http serverVulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web...CVE-2019-24147.8 High
- ibm http serverVulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OSSL...CVE-2018-27605.9 Medium
- ibm http serverVulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web...CVE-2018-25615.3 Medium
- oracle http serverUnspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1...CVE-2016-34823.7 Low
- oracle http serverUnspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2...CVE-2016-06713.7 Low
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- apache http server, debian linux, oracle enterprise manager ops center +2 more +4 moreRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...CVE-2014-0226Public exploitFix availableEPSS 85.8%6.8 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- apache http server, canonical ubuntu linux, oracle secure global desktop +2 moreThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2014-0098Fix availableEPSS 26.7%5.0 Medium
- apache http server, canonical ubuntu linux +1 moreThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...CVE-2013-6438Fix availableEPSS 27.5%5.0 Medium
- canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...CVE-2015-2808Fix availableEPSS 73.9%5.0 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...CVE-2013-1862Fix availableEPSS 24.9%5.1 Medium
- canonical ubuntu linux, fujitsu m10-1 firmware, m10-4 firmware +13 more +15 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases,...CVE-2013-2566EPSS 84.4%5.9 Medium
- trustwave modsecurity, debian linux, opensuse +1 more +3 moreModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the...CVE-2012-2751Fix available4.3 Medium
- apache http server, broadcom vmware ace management server, ibm websphere application server +2 moremodules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2...CVE-2010-0425Public exploitEPSS 94.2%10.0 High
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...CVE-2009-1955Public exploitFix availableEPSS 53.0%7.5 High
- oracle application server, http server component +1 moreUnspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4...CVE-2008-26144.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- oracle application server, collaboration suite, http server +2 moreUnspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0...CVE-2007-02823.2 Low
- oracle application server, collaboration suite, http server +2 moreMultiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0...CVE-2007-02815.0 Medium
- Show moreLoading…