Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 49

Export CSV
CVE-2002-0843

security flaw

Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.

CVSS 2.0 · 7.5 High EPSS 21.4% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Http Server Application Server Database Server and 5 more
CVE-2002-0985

security flaw

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Openpkg Php Redhat
Products
Openpkg Php Enterprise Linux and 3 more
CVE-2002-0986

security flaw

The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."

CVSS 2.0 · 5.0 Medium EPSS 4.7% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Linux and 2 more
CVE-2002-1148

security flaw

The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.

CVSS 2.0 · 5.0 Medium EPSS 18.6% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Rhel Stronghold Stronghold
CVE-2002-1157

security flaw

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.

CVSS 2.0 · 7.5 High EPSS 11.1% KEV · Not listed
Vendors
Mod Ssl Redhat
Products
Mod Ssl Enterprise Linux Linux and 2 more
CVE-2002-1394

security flaw

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

CVSS 2.0 · 7.5 High EPSS 5.9% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Rhel Stronghold Stronghold
CVE-2003-0020

security flaw

Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.

CVSS 2.0 · 5.0 Medium EPSS 16.5% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Linux and 2 more
CVE-2003-0083

security flaw

Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.

CVSS 2.0 · 5.0 Medium EPSS 19.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Linux Rhel Stronghold and 1 more
CVE-2003-0192

security flaw

Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.

CVSS 2.0 · 6.4 Medium EPSS 6.0% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Linux and 2 more