Trustwave Modsecurity vulnerabilities

• owasp-modsecurity modsecurity ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Public exploitFix available 7.5 HighMay 21, 2025
• owasp-modsecurity modsecurity Libmodsecurity3 has possible bypass of encoded HTML entities CVE-2025-27110 Fix available 7.9 HighFebruary 25, 2025
• modsecurity A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via... CVE-2024-46292 Fix availableDisputed 7.5 HighOctober 9, 2024
• trustwave modsecurity, debian linux +1 more In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... CVE-2023-24021 Fix available 7.5 HighJanuary 20, 2023
• owasp modsecurity, debian linux +1 more In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... CVE-2022-48279 Fix available 7.5 HighJanuary 20, 2023
• owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 more ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects... CVE-2021-42717 Public exploitFix available 7.5 HighDecember 7, 2021
• trustwave modsecurity, debian linux +1 more apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by... CVE-2013-5705 Fix available 5.0 MediumApril 15, 2014
• trustwave modsecurity, opensuse +1 more The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a... CVE-2013-2765 Public exploitFix available EPSS 13.7% 5.0 MediumJune 26, 2013
• trustwave modsecurity, debian linux, fedoraproject fedora +1 more +3 more ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to... CVE-2013-1915 Fix available 7.5 HighApril 9, 2013
• fedoraproject fedora, opensuse, trustwave modsecurity +2 more The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to... CVE-2012-4528 Public exploitFix available EPSS 12.4% 5.0 MediumDecember 28, 2012
• trustwave modsecurity, opensuse +1 more ModSecurity before 2.5.11 treats request parameter values containing single quotes as files,... CVE-2009-5031 4.3 MediumJuly 22, 2012
• trustwave modsecurity, debian linux, opensuse +1 more +3 more ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the... CVE-2012-2751 Fix available 4.3 MediumJuly 2, 2012
• trustwave modsecurity, fedoraproject fedora +1 more The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a... CVE-2009-1903 4.3 MediumJune 3, 2009
• trustwave modsecurity, fedoraproject fedora +1 more The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of... CVE-2009-1902 Public exploit EPSS 13.7% 5.0 MediumJune 3, 2009