Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0.Check if you run itEPSS 0.45%Dec 5, 2025
- Medium6.3A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true".Check if you run itEPSS 0.88%Jul 23, 2025
- Medium5.3The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure.Check if you run itEPSS 0.45%Jul 3, 2025
- High7.5A flaw was found in the mod_auth_openidc module for Apache httpd.Check if you run itEPSS 1.60%Apr 29, 2025
- UnknownApache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Patch nowKEVEPSS 84.51%Jul 25, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- UnknownApache HTTP Server versions 2.4.0 to 2.4.23 mod_session_crypto VulnerabilityPatch nowKEVEPSS 49.02%Feb 14, 2023
- UnknownApache HTTP Server Improper Input ValidationPatch nowKEVEPSS 56.77%Feb 22, 2022
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.96%Oct 7, 2021
- Critical9.8Apache HTTP Server Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Sep 29, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 100.00%Sep 16, 2021
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- UnknownApache HTTP Server Uncontrolled Resource ConsumptionPatch nowKEVEPSS 98.95%Aug 24, 2011
- UnknownApache HTTP Server Improper Certificate ValidationPatch nowKEVEPSS 87.26%Nov 18, 2009
- Unknownsuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities tCheck if you run itEPSS 0.70%Apr 13, 2007
- High7.8Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications)…Check if you run itEPSS 9.68%Dec 31, 2002
- UnknownApache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 95.23%Jun 17, 2002
Sort