Skip to content
Fencer Intel

All · Apache HTTP Server

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2002-1850 mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumpt…
    Apache HTTP Server
    1 public exploit EPSS 17.4% chance of exploitation in 30 days, percentile 97%
  2. 4.6
    CVE-2002-1658 Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument.
    Apache HTTP Server
    EPSS 1.1% chance of exploitation in 30 days, percentile 64%
  3. 2.6
    CVE-2002-1233 A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for…
    Apache HTTP Server
  4. 5.0
    CVE-2002-1156 Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI en…
    Apache HTTP Server
    EPSS 14.9% chance of exploitation in 30 days, percentile 96%
  5. 6.8
    CVE-2002-0840 Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalNa…
    Apache HTTP ServerOracle Database
    1 public exploit EPSS 95.1% chance of exploitation in 30 days, percentile 99.8%
  6. 7.5
    CVE-2002-0843 Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicio…
    Apache HTTP ServerOracle Database
    EPSS 21.4% chance of exploitation in 30 days, percentile 97%
  7. 7.2
    CVE-2002-0839 The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1…
    Apache HTTP Server
  8. 5.0
    CVE-2002-1593 mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a n…
    Apache HTTP Server
    EPSS 7.0% chance of exploitation in 30 days, percentile 94%
  9. 5.0
    CVE-2002-0654 Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a reque…
    Apache HTTP Server
    1 public exploit EPSS 58.7% chance of exploitation in 30 days, percentile 99.1%
  10. 7.5
    CVE-2002-0661 Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files…
    Apache HTTP Server
    1 public exploit EPSS 69.7% chance of exploitation in 30 days, percentile 99.3%
  11. 7.5
    CVE-2002-0392 Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitra…
    Apache HTTP Server
    4 public exploits EPSS 95.2% chance of exploitation in 30 days, percentile 99.8%
  12. 5.0
    CVE-2002-1592 The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that…
    Apache HTTP Server
    EPSS 12.5% chance of exploitation in 30 days, percentile 96%
  13. 7.5
    CVE-2002-0257 Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other us…
    Apache HTTP Server
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  14. 5.0
    CVE-2002-0249 PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of th…
    Apache HTTP Server
    EPSS 7.2% chance of exploitation in 30 days, percentile 94%
  15. 5.0
    CVE-2002-0240 PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pa…
    Apache HTTP Server
    EPSS 7.4% chance of exploitation in 30 days, percentile 94%
  16. 7.5
    CVE-2002-0061 Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacter…
    Apache HTTP Server
    1 public exploit EPSS 51.5% chance of exploitation in 30 days, percentile 98%
  17. 5.0
    CVE-2001-1556 The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which…
    Apache HTTP Server
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  18. 2.1
    CVE-2001-1534 mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time a…
    Apache HTTP Server
  19. 7.5
    CVE-2001-1449 The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers…
    Apache HTTP Server
    EPSS 7.8% chance of exploitation in 30 days, percentile 94%
  20. 5.0
    CVE-2001-0730 split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with…
    Apache HTTP Server
    EPSS 11.9% chance of exploitation in 30 days, percentile 96%
  21. 9.8
    CVE-2001-0766 Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains som…
    Apache HTTP Server
    1 public exploit EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  22. 5.0
    CVE-2001-0729 Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a larg…
    Apache HTTP Server
    EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  23. 5.0
    CVE-2001-0731 Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the…
    Apache HTTP Server
    1 public exploit EPSS 56.8% chance of exploitation in 30 days, percentile 99%
  24. 5.0
    CVE-2001-1072 Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters…
    Apache HTTP Server
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  25. 5.0
    CVE-2001-1342 Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI t…
    Apache HTTP Server
    EPSS 30.0% chance of exploitation in 30 days, percentile 98%
  26. 5.0
    CVE-2001-0925 The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via a…
    Apache HTTP Server
    4 public exploits EPSS 75.2% chance of exploitation in 30 days, percentile 99.5%
  27. 5.0
    CVE-2001-0042 PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded…
    Apache HTTP Server
    1 public exploit EPSS 9.6% chance of exploitation in 30 days, percentile 95%
  28. 3.3
    CVE-2001-0131 htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
    Apache HTTP Server
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  29. 5.0
    CVE-2000-0913 mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include…
    Apache HTTP Server
    EPSS 35.6% chance of exploitation in 30 days, percentile 98%
  30. 5.0
    CVE-2000-0869 The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories vi…
    Apache HTTP Server
    1 public exploit EPSS 51.0% chance of exploitation in 30 days, percentile 98%