|
131
|
-
4.3
|
MEDIUM
|
Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in …
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2011-0419
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.0
2.2.0
|
2.0.65
2.2.18
|
|
|
2024-11-21 10:23
2011-05-17
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
132
|
-
5.0
|
MEDIUM
|
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Ap…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-1623
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.35
2.2.0
|
|
|
2.0.64
2.2.17
|
2024-11-21 10:14
2010-10-5
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
133
|
-
5.0
|
MEDIUM
|
mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remo…
|
CWE-200
Information Exposure
|
CVE-2010-2791
|
cpe:2.3:a:apache:http_server:2.2.9:*
|
|
|
|
|
2024-11-21 10:17
2010-08-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
134
|
-
5.0
|
MEDIUM
|
The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
|
NVD-CWE-Other
|
CVE-2010-1452
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.35
2.2.0
|
|
|
2.0.64
2.2.16
|
2024-11-21 10:14
2010-07-29
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
135
|
-
5.0
|
MEDIUM
|
mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, …
|
CWE-200
Information Exposure
|
CVE-2010-2068
|
cpe:2.3:a:apache:http_server:2.3.5:alpha
cpe:2.3:a:apache:http_server:2.3.4:alpha
cpe:2.3:a:apache:http_server:2.…
|
|
|
|
|
2024-11-21 10:15
2010-06-19
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
136
|
-
4.3
|
MEDIUM
|
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumsta…
|
CWE-200
Information Exposure
|
CVE-2010-0434
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.35
2.2.0
|
|
|
2.0.64
2.2.15
|
2023-02-13 13:16
2010-03-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
137
|
-
10.0
|
HIGH
|
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request proces…
|
NVD-CWE-noinfo
|
CVE-2010-0425
|
cpe:2.3:a:apache:http_server:2.3.6:*
cpe:2.3:a:apache:http_server:2.3.5:*
cpe:2.3:a:apache:http_server:2.3.4:*
|
|
|
|
2024-02-14 10:17
2010-03-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
138
|
-
5.0
|
MEDIUM
|
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body…
|
NVD-CWE-Other
|
CVE-2010-0408
|
cpe:2.3:a:apache:http_server:2.2:*
cpe:2.3:a:apache:http_server:2.2.9:*
cpe:2.3:a:apache:http_server:2.2.8:*
c…
|
|
|
|
|
2023-11-2 00:32
2010-03-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
139
|
-
4.3
|
MEDIUM
|
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which al…
|
CWE-189
Numeric Errors
|
CVE-2003-1580
|
cpe:2.3:a:apache:http_server:2.0.44:*
|
|
|
|
|
2010-02-8 14:00
2010-02-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
140
|
-
2.6
|
LOW
|
The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafte…
|
CWE-79
Cross-site Scripting
|
CVE-2003-1581
|
cpe:2.3:a:apache:http_server:2.0.44:*
|
|
|
|
|
2010-02-8 14:00
2010-02-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|