Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 19

Export CSV
CVE-2012-0059

Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages

A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.

CVSS 3.1 · 4.9 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Network Proxy Network Satellite Rhel Els and 1 more
CVE-2012-5562

Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite

A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.

CVSS 3.1 · 8.6 High EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Network Proxy Satellite
CVE-2007-5000

httpd: mod_imagemap XSS

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 46.6% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 4 more
Products
Http Server Ubuntu Linux Fedora and 9 more
CVE-2007-6388

apache mod_status cross-site scripting

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 75.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Certificate System Enterprise Linux and 3 more
CVE-2006-5752

httpd mod_status XSS

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CVSS 2.0 · 4.3 Medium EPSS 27.8% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 9 more
CVE-2007-3304

httpd scoreboard lack of PID protection

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."

CVSS 2.0 · 4.7 Medium EPSS 3.3% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 8 more
CVE-2007-1349

mod_perl PerlRun denial of service

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

CVSS 2.0 · 5.0 Medium EPSS 10.4% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Mod Perl Ubuntu Linux Certificate System and 9 more
CVE-2007-4465

mod_autoindex XSS

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS 3.1 · 6.1 Medium EPSS 26.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Certificate System Enterprise Linux and 3 more
CVE-2004-0488

mod_ssl ssl_util_uuencode_binary CA issue

Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

CVSS 2.0 · 7.5 High EPSS 37.7% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Http Server Debian Linux Enterprise Linux and 5 more
CVE-2004-0700

mod_proxy hook format string

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

CVSS 2.0 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Gentoo Mod Ssl Redhat
Products
Linux Mod Ssl Enterprise Linux and 2 more
CVE-2004-0885

mod_ssl SSLCipherSuite bypass

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

CVSS 2.0 · 7.5 High EPSS 15.4% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Network Proxy and 3 more
CVE-2005-3352

httpd cross-site scripting flaw in mod_imap

Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.

CVSS 2.0 · 4.3 Medium EPSS 73.7% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Network Proxy and 2 more
CVE-2006-3918

httpd: Expect header XSS

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.

CVSS 2.0 · 4.3 Medium EPSS 95.1% KEV · Not listed
Vendors
Apache Canonical Debian and 1 more
Products
Http Server Ubuntu Linux Debian Linux and 6 more
CVE-2010-2236

Proxy: Improper monitoring probes input sanitization (ACE)

The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.

CVSS 2.0 · 6.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Redhat
Products
Network Proxy Satellite Spacewalk-java
CVE-2011-1755

jabberd: DoS via the XML "billion laughs attack"

jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Apple Fedoraproject Jabberd2 and 1 more
Products
Mac Os X Mac Os X Server Fedora and 3 more
CVE-2012-2673

gc: malloc() and calloc() overflows

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Boehm-demers-weiser Redhat
Products
Garbage Collector Enterprise Linux Network Proxy and 1 more
CVE-2012-3525

jabberd: Prone to unsolicited XMPP Dialback attacks

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.

CVSS 2.0 · 5.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Jabber2 Jabberd2 Redhat
Products
Jabberd2 Jabberd2 Network Proxy and 1 more
CVE-2019-10137

spacewalk-proxy: Path traversal in proxy authentication cache

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.

CVSS 3.0 · 8.1 High EPSS 3.1% KEV · Not listed
Vendors
Redhat
Products
Network Proxy Satellite Spacewalk