Skip to content
Fencer Intel

All · Apache HTTP Server

Newest first, late arrivals on top. Also a feed.

  1. 6.4
    CVE-2004-0493 The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and…
    Apache HTTP Server
    2 public exploits EPSS 84.8% chance of exploitation in 30 days, percentile 99.7%
  2. 10.0
    CVE-2004-0492 Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (p…
    Apache HTTP Server
    EPSS 33.6% chance of exploitation in 30 days, percentile 98%
  3. 7.5
    CVE-2004-0488 Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust…
    Apache HTTP Server
    EPSS 37.7% chance of exploitation in 30 days, percentile 98%
  4. 5.0
    CVE-2004-0173 Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attack…
    Apache HTTP Server
    1 public exploit EPSS 15.8% chance of exploitation in 30 days, percentile 96%
  5. 5.0
    CVE-2004-0113 Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumpti…
    Apache HTTP Server
    EPSS 11.0% chance of exploitation in 30 days, percentile 95%
  6. 7.5
    CVE-2003-0993 mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP address…
    Apache HTTP Server
    EPSS 10.8% chance of exploitation in 30 days, percentile 95%
  7. 7.5
    CVE-2004-0174 Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to…
    Apache HTTP Server
    EPSS 11.5% chance of exploitation in 30 days, percentile 96%
  8. 2.1
    CVE-2004-1834 mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allo…
    Apache HTTP Server
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  9. 7.5
    CVE-2003-0987 mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
    Apache HTTP Server
    EPSS 5.6% chance of exploitation in 30 days, percentile 92%
  10. 7.5
    CVE-2004-1082 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remo…
    Apache HTTP Server
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  11. 4.3
    CVE-2003-1418 Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which…
    Apache HTTP Server
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  12. 4.3
    CVE-2003-1307 The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process g…
    Apache HTTP Server
    2 public exploits EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  13. 10.0
    CVE-2003-0789 mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send…
    Apache HTTP Server
    EPSS 12.4% chance of exploitation in 30 days, percentile 96%
  14. 7.2
    CVE-2003-0542 Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration…
    Apache HTTP Server
    EPSS 30.4% chance of exploitation in 30 days, percentile 98%
  15. 5.0
    CVE-2003-0460 The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are…
    Apache HTTP Server
    EPSS 13.4% chance of exploitation in 30 days, percentile 96%
  16. 5.0
    CVE-2003-0254 Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when…
    Apache HTTP Server
    EPSS 9.2% chance of exploitation in 30 days, percentile 95%
  17. 5.0
    CVE-2003-0253 The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.
    Apache HTTP Server
    EPSS 9.1% chance of exploitation in 30 days, percentile 95%
  18. 6.4
    CVE-2003-0192 Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegoti…
    Apache HTTP Server
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%
  19. 5.0
    CVE-2003-0245 Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote atta…
    Apache HTTP Server
    1 public exploit EPSS 63.5% chance of exploitation in 30 days, percentile 99.2%
  20. 5.0
    CVE-2003-0189 The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt…
    Apache HTTP Server
    EPSS 15.1% chance of exploitation in 30 days, percentile 96%
  21. 5.0
    CVE-2003-0134 Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of s…
    Apache HTTP Server
    EPSS 6.6% chance of exploitation in 30 days, percentile 93%
  22. 5.0
    CVE-2003-0132 A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of li…
    Apache HTTP Server
    2 public exploits EPSS 87.1% chance of exploitation in 30 days, percentile 99.7%
  23. 5.0
    CVE-2003-0083 Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could m…
    Apache HTTP Server
    EPSS 19.2% chance of exploitation in 30 days, percentile 97%
  24. 5.0
    CVE-2003-0020 Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences in…
    Apache HTTP Server
    EPSS 16.5% chance of exploitation in 30 days, percentile 97%
  25. 5.0
    CVE-2003-0017 Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain ille…
    Apache HTTP Server
    EPSS 6.4% chance of exploitation in 30 days, percentile 93%
  26. 7.5
    CVE-2003-0016 Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service o…
    Apache HTTP Server
    EPSS 17.8% chance of exploitation in 30 days, percentile 97%
  27. 7.8
    CVE-2002-2272 Apache Tomcat DoS via Malicious Get Request
    Apache HTTP Servermaven
    1 public exploit EPSS 9.7% chance of exploitation in 30 days, percentile 95%
  28. 5.0
    CVE-2002-2103 Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double…
    Apache HTTP Server
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  29. 7.5
    CVE-2002-2029 PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and po…
    Apache HTTP Server
    1 public exploit EPSS 23.1% chance of exploitation in 30 days, percentile 97%
  30. 5.0
    CVE-2002-2012 Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an H…
    Apache HTTP Server
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%