Skip to content
Fencer Intel

All · Apache HTTP Server

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2012-3499 Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote a…
    Apache HTTP Server
    EPSS 22.9% chance of exploitation in 30 days, percentile 97%
  2. 5.0
    CVE-2012-4557 The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long…
    Apache HTTP Server
    EPSS 17.5% chance of exploitation in 30 days, percentile 97%
  3. 4.3
    CVE-2012-3502 The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apa…
    Apache HTTP Server
    EPSS 9.6% chance of exploitation in 30 days, percentile 95%
  4. 2.6
    CVE-2012-2687 Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in…
    Apache HTTP Server
    EPSS 23.1% chance of exploitation in 30 days, percentile 97%
  5. 6.9
    CVE-2012-0883 envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows l…
    Apache HTTP Server
  6. 4.3
    CVE-2012-0053 protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request…
    Apache HTTP Server
    1 public exploit EPSS 82.2% chance of exploitation in 30 days, percentile 99.6%
  7. 2.6
    CVE-2012-0021 The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded M…
    Apache HTTP Server
    EPSS 30.3% chance of exploitation in 30 days, percentile 98%
  8. 4.6
    CVE-2012-0031 scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdow…
    Apache HTTP Server
    1 public exploit EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  9. 5.0
    CVE-2007-6750 The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demon…
    Apache HTTP Server
    1 public exploit EPSS 70.5% chance of exploitation in 30 days, percentile 99.4%
  10. 4.3
    CVE-2011-4317 The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179…
    Apache HTTP Server
    1 public exploit EPSS 59.6% chance of exploitation in 30 days, percentile 99.1%
  11. 4.3
    CVE-2011-3639 The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, d…
    Apache HTTP Server
    1 public exploit EPSS 49.7% chance of exploitation in 30 days, percentile 98%
  12. 1.2
    CVE-2011-4415 The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif mod…
    Apache HTTP Server
    1 public exploit EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  13. 4.4
    CVE-2011-3607 Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when…
    Apache HTTP Server
    1 public exploit EPSS 4.9% chance of exploitation in 30 days, percentile 92%
  14. 5.0
    CVE-2011-3368 The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly inter…
    Apache HTTP Server
    2 public exploits EPSS 90.7% chance of exploitation in 30 days, percentile 99.8%
  15. 4.3
    CVE-2011-3348 The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remot…
    Apache HTTP Server
    EPSS 22.4% chance of exploitation in 30 days, percentile 97%
  16. 7.8
    CVE-2011-3192 The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a den…
    Apache HTTP Server
    3 public exploits EPSS 98.9% chance of exploitation in 30 days, percentile 99.9%
  17. 4.3
    CVE-2011-1928 The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18…
    Apache HTTP Server
    EPSS 10.3% chance of exploitation in 30 days, percentile 95%
  18. 4.3
    CVE-2011-0419 Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 an…
    Apache HTTP Server
    1 public exploit EPSS 30.4% chance of exploitation in 30 days, percentile 98%
  19. 5.0
    CVE-2010-1623 Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) b…
    Apache HTTP Server
    EPSS 20.3% chance of exploitation in 30 days, percentile 97%
  20. 5.0
    CVE-2010-2791 mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when readin…
    Apache HTTP Server
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  21. 5.0
    CVE-2010-1452 The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service…
    Apache HTTP Server
    EPSS 21.4% chance of exploitation in 30 days, percentile 97%
  22. 5.0
    CVE-2010-2068 mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS…
    Apache HTTP Server
    EPSS 16.0% chance of exploitation in 30 days, percentile 96%
  23. 4.3
    CVE-2010-0434 The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not…
    Apache HTTP Server
    EPSS 18.4% chance of exploitation in 30 days, percentile 97%
  24. 10.0
    CVE-2010-0425 modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7,…
    Apache HTTP Server
    2 public exploits EPSS 94.2% chance of exploitation in 30 days, percentile 99.8%
  25. 5.0
    CVE-2010-0408 The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handl…
    Apache HTTP Server
    EPSS 20.9% chance of exploitation in 30 days, percentile 97%
  26. 2.6
    CVE-2003-1581 The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text int…
    Apache HTTP Server
    EPSS 3.1% chance of exploitation in 30 days, percentile 87%
  27. 4.3
    CVE-2003-1580 The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether…
    Apache HTTP Server
    EPSS 3.7% chance of exploitation in 30 days, percentile 89%
  28. 6.8
    CVE-2010-0010 Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit plat…
    Apache HTTP Server
    EPSS 43.4% chance of exploitation in 30 days, percentile 98%
  29. 5.0
    CVE-2009-3560 The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent atta…
    Apache HTTP Server
    EPSS 24.3% chance of exploitation in 30 days, percentile 97%
  30. 9.8
    CVE-2009-3555 Apache Tomcat affected by vulnerability in TLS and SSL protocol
    nginxApache HTTP ServerOpenSSLmaven
    2 public exploits EPSS 87.3% chance of exploitation in 30 days, percentile 99.7%