Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server.Open the advisoryDec 5, 2025
- High7.5An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0.Open the advisoryDec 5, 2025
- Unknownmod_authnz_external_project mod_authnz_external Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.66%Feb 7, 2025
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- UnknownApache HTTP Server versions 2.4.0 to 2.4.23 mod_session_crypto VulnerabilityPatch nowKEVEPSS 49.02%Feb 14, 2023
- Unknownapache2 CVE-2020-11984Patch nowKEVEPSS 90.04%Feb 22, 2022
- Unknownapache2 CVE-2019-10098Patch nowKEVEPSS 73.98%Feb 22, 2022
- Unknownapache2 CVE-2019-10097Patch nowKEVEPSS 52.87%Feb 22, 2022
- Unknownapache2 CVE-2019-0190Patch nowKEVEPSS 59.05%Feb 22, 2022
- Unknownapache2 CVE-2018-8011Patch nowKEVEPSS 55.61%Feb 22, 2022
- Unknownapache2 CVE-2018-1303Patch nowKEVEPSS 69.80%Feb 22, 2022
- Unknownapache2 CVE-2018-11763Patch nowKEVEPSS 50.85%Feb 22, 2022
- Unknownapache2 CVE-2017-9798Patch nowKEVEPSS 95.00%Feb 22, 2022
- UnknownApache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Feb 22, 2022
- Unknownapache2 CVE-2017-7659Patch nowKEVEPSS 53.94%Feb 22, 2022
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- UnknownGNU Bourne-Again Shell (Bash) Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.33%Mar 1, 2018
- High8.8GNU Bash OS Command Injection VulnerabilityPatch nowKEVEPSS 99.68%Sep 30, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 99.94%Sep 24, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Sep 24, 2014
- UnknownApache HTTP Server Uncontrolled Resource ConsumptionPatch nowKEVEPSS 98.83%Aug 24, 2011