Browse CVEs

MEDIUM 5.0 CVE-1999-0289 The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. HTTP Server Mitigation only Fix from $1,6001999-12-12 HIGH 7.5 CVE-1999-1053EPSS 85% guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbit… HTTP Server Patch available Fix from $1,9501999-09-13 HIGH 10.0 CVE-1999-0926EPSS 9% Apache allows remote attackers to conduct a denial of service via a large number of MIME headers. HTTP Server No fix yet Fix from $1,9501999-09-03 MEDIUM 5.0 CVE-2000-1206EPSS 5% Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows r… HTTP Server Mitigation only Fix from $1,6001999-08-20 HIGH 10.0 CVE-1999-1237EPSS 8% Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attac… HTTP Server Mitigation only Fix from $1,9501999-06-06 MEDIUM 5.0 CVE-1999-1412EPSS 35% A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a fl… HTTP Server Mitigation only Fix from $1,6001999-06-03 MEDIUM 5.0 CVE-1999-0678EPSS 31% A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the … HTTP Server Mitigation only Fix from $1,6001999-01-17 HIGH 10.0 CVE-1999-1199EPSS 8% Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers wit… HTTP Server after 1.3.1 Fix from $1,9501998-08-07 MEDIUM 5.0 CVE-1999-0107EPSS 20% Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a la… HTTP Server Mitigation only Fix from $1,6001997-12-30 HIGH 7.5 CVE-1999-0071 Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. HTTP Server Mitigation only Fix from $1,9501997-09-01 HIGH 7.5 CVE-1999-0236EPSS 26% ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. HTTP Server 1.0+ Fix from $1,9501997-01-01 HIGH 7.5 CVE-1999-0045EPSS 26% List of arbitrary files on Web host via nph-test-cgi script. HTTP Server Mitigation only Fix from $1,9501996-12-10 MEDIUM 5.0 CVE-1999-0070EPSS 30% test-cgi program allows an attacker to list files on the server. HTTP Server 1.3.0+ Fix from $1,6001996-04-01 HIGH 10.0 CVE-1999-0067EPSS 87% phf CGI program allows remote command execution through shell metacharacters. HTTP Server Mitigation only Fix from $1,9501996-03-20