Apache
Page 35 of 35 — Apache CVEs from a corpus of 3423, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0869 | | 2000-11-14 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP… | |
CVE-2000-0868 | | 2000-11-14 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requ… | |
CVE-2000-0760 | | 2000-10-20 | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp… | |
CVE-2000-0759 | | 2000-10-20 | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message t… | |
CVE-2000-1204 | | 2000-10-13 | Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI progr… | |
CVE-2000-0672 | | 2000-07-20 | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly c… | |
CVE-2000-0505 | | 2000-05-31 | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / charac… | |
CVE-2000-1205 | | 2000-02-01 | Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CG… | |
CVE-1999-1293 | | 1999-12-31 | mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core. | |
CVE-1999-0289 | | 1999-12-12 | The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. | |
CVE-1999-1053 | | 1999-09-13 | guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary comma… | |
CVE-1999-0926 | | 1999-09-03 | Apache allows remote attackers to conduct a denial of service via a large number of MIME headers. | |
CVE-2000-1206 | | 1999-08-20 | Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote atta… | |
CVE-1999-1237 | | 1999-06-06 | Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to ex… | |
CVE-1999-1412 | | 1999-06-03 | A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTT… | |
CVE-1999-0678 | | 1999-01-17 | A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire ser… | |
CVE-1999-1199 | | 1998-08-07 | Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same… | |
CVE-1999-0107 | | 1997-12-30 | Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number… | |
CVE-1999-0071 | | 1997-09-01 | Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. | |
CVE-1999-0236 | High | 7.5 | 1997-01-01 | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. |
CVE-1999-0045 | | 1996-12-10 | List of arbitrary files on Web host via nph-test-cgi script. | |
CVE-1999-0070 | | 1996-04-01 | test-cgi program allows an attacker to list files on the server. | |
CVE-1999-0067 | | 1996-03-20 | phf CGI program allows remote command execution through shell metacharacters. |