Apache

Page 40 of 40 — Apache CVEs from a corpus of 3918, newest first, with CVSS severity and publication dates.

Apache CVEs — newest first (page 40 of 40)
CVESeverityScorePublishedSummary
CVE-2000-06722000-07-20The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly c…
CVE-2000-05052000-05-31The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / charac…
CVE-2000-12052000-02-01Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CG…
CVE-1999-12931999-12-31mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
CVE-1999-02891999-12-12The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
CVE-1999-10531999-09-13guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary comma…
CVE-1999-09261999-09-03Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
CVE-2000-12061999-08-20Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote atta…
CVE-1999-12371999-06-06Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to ex…
CVE-1999-14121999-06-03A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTT…
CVE-1999-06781999-01-17A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire ser…
CVE-1999-11991998-08-07Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same…
CVE-1999-01071997-12-30Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number…
CVE-1999-00711997-09-01Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
CVE-1999-0236High7.51997-01-01ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
CVE-1999-00451996-12-10List of arbitrary files on Web host via nph-test-cgi script.
CVE-1999-00701996-04-01test-cgi program allows an attacker to list files on the server.
CVE-1999-00671996-03-20phf CGI program allows remote command execution through shell metacharacters.