Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11

Export CSV
CVE-2001-0730

security flaw

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

CVSS 2.0 · 5.0 Medium EPSS 11.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Linux Secure Web Server
CVE-2001-0884

security flaw

Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.

CVSS 2.0 · 5.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Linux Powertools and 1 more
CVE-2002-0082

security flaw

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.

CVSS 2.0 · 7.5 High EPSS 29.7% KEV · Not listed
Vendors
Apache-ssl Mod Ssl Redhat
Products
Apache-ssl Mod Ssl Linux and 2 more
CVE-2002-0388

security flaw

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.

CVSS 2.0 · 7.5 High EPSS 6.3% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Enterprise Linux Linux and 2 more
CVE-2002-0392

security flaw

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.

CVSS 2.0 · 7.5 High EPSS 95.2% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Http Server Debian Linux Enterprise Linux and 4 more
CVE-2002-0653

security flaw

Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Modssl Redhat
Products
Mod Ssl Enterprise Linux Linux and 3 more
CVE-2002-0658

security flaw

OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Ossp Redhat
Products
Mm Enterprise Linux Linux and 2 more
CVE-2002-0855

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.

CVSS 2.0 · 7.5 High EPSS 6.1% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Enterprise Linux Linux and 2 more
CVE-2004-0809

security flaw

The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.

CVSS 2.0 · 5.0 Medium EPSS 17.2% KEV · Not listed
Vendors
Apache Debian Gentoo and 5 more
Products
Http Server Debian Linux Linux and 9 more