Trustwave vulnerabilities

Products

• Modsecurity 14
• Webdefend 2

Newest

• owasp-modsecurity modsecurity ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Public exploitFix available 7.5 HighMay 21, 2025
• owasp-modsecurity modsecurity Libmodsecurity3 has possible bypass of encoded HTML entities CVE-2025-27110 Fix available 7.9 HighFebruary 25, 2025
• modsecurity A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via... CVE-2024-46292 Fix availableDisputed 7.5 HighOctober 9, 2024
• trustwave modsecurity, debian linux +1 more In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... CVE-2023-24021 Fix available 7.5 HighJanuary 20, 2023
• owasp modsecurity, debian linux +1 more In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... CVE-2022-48279 Fix available 7.5 HighJanuary 20, 2023
• owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 more ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects... CVE-2021-42717 Public exploitFix available 7.5 HighDecember 7, 2021
• trustwave mailmarshal The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection. CVE-2014-2727 9.8 CriticalFebruary 19, 2020
• trustwave secure web gateway Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an... CVE-2017-18001 Public exploit EPSS 14.1% 9.8 CriticalDecember 31, 2017
• trustwave modsecurity, debian linux +1 more apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by... CVE-2013-5705 Fix available 5.0 MediumApril 15, 2014
• trustwave modsecurity, opensuse +1 more The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a... CVE-2013-2765 Public exploitFix available EPSS 13.7% 5.0 MediumJune 26, 2013
• trustwave modsecurity, debian linux, fedoraproject fedora +1 more +3 more ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to... CVE-2013-1915 Fix available 7.5 HighApril 9, 2013
• fedoraproject fedora, opensuse, trustwave modsecurity +2 more The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to... CVE-2012-4528 Public exploitFix available EPSS 12.4% 5.0 MediumDecember 28, 2012
• trustwave modsecurity, opensuse +1 more ModSecurity before 2.5.11 treats request parameter values containing single quotes as files,... CVE-2009-5031 Fix available 4.3 MediumJuly 22, 2012
• trustwave modsecurity, debian linux, opensuse +1 more +3 more ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the... CVE-2012-2751 Fix available 4.3 MediumJuly 2, 2012
• trustwave webdefend Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials... CVE-2011-1906 5.0 MediumMay 5, 2011
• trustwave webdefend The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console... CVE-2011-0756 5.0 MediumMay 5, 2011
• trustwave modsecurity, fedoraproject fedora +1 more The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a... CVE-2009-1903 4.3 MediumJune 3, 2009
• trustwave modsecurity, fedoraproject fedora +1 more The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of... CVE-2009-1902 Public exploit EPSS 13.7% 5.0 MediumJune 3, 2009