Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apache http server 2.3.1 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2

CVE-2010-0425

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 up to and including 2.0.63, 2.2.0 up to and including 2.2.14, and 2.3.x prior to 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISA...
Apache Http Server 2.3.0Apache Http Server 2.3.1Apache Http Server 2.3.2Apache Http Server 2.3.3Apache Http Server 2.3.4Apache Http Server 2.3.5Apache Http Server 2.3.6Apache Http Server 2.0.9Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.34Apache Http Server 2.0.35
7.5
CVSSv2

CVE-1999-1053

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote malicious users to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache al...
Apache Http Server 1.3.9Matt Wright Matt Wright Guestbook 2.3
6.8
CVSSv2

CVE-2021-40438

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and previous versions.
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Storagegrid -Broadcom Brocade Fabric Operating System Firmware -F5 F5osOracle Enterprise Manager Ops Center 12.4.0.0
7.5
CVSSv2

CVE-2021-39275

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and previous versions.
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Storagegrid -Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Instantis Enterprisetrack 17.1
5
CVSSv2

CVE-2021-36160

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Storagegrid -Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0
5
CVSSv2

CVE-2021-34798

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and previous versions.
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Storagegrid -Tenable Tenable.scOracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Enterprise Manager Base Platform 13.4.0.0
5
CVSSv2

CVE-2021-33193

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Tenable Tenable.scOracle Secure BackupOracle Zfs Storage Appliance Kit 8.8
9.3
CVSSv2

CVE-2021-44228

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4jApache Log4j 2.0Siemens Sppa-t3000 Ses3000 FirmwareSiemens CaptialSiemens Captial 2019.1Siemens ComosSiemens Desigo Cc Advanced Reports 4.0Siemens Desigo Cc Advanced Reports 4.1Siemens Desigo Cc Advanced Reports 4.2Siemens Desigo Cc Advanced Reports 5.0Siemens Desigo Cc Advanced Reports 5.1Siemens Desigo Cc Info Center 5.0
7.5
CVSSv2

CVE-2006-2489

Integer overflow in CGI scripts in Nagios 1.x prior to 1.4.1 and 2.x prior to 2.3.1 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability th...
Nagios Nagios 1.0Nagios Nagios 1.0b1Nagios Nagios 1.0b2Nagios Nagios 1.0b3Nagios Nagios 1.0b4Nagios Nagios 1.0b5Nagios Nagios 1.0b6Nagios Nagios 1.1Nagios Nagios 1.2Nagios Nagios 1.3Nagios Nagios 1.4Nagios Nagios 2.0
7.5
CVSSv3

CVE-2022-43680

In libexpat up to and including 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
Libexpat Project LibexpatDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp Active Iq Unified Manager -
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-21317CVE-2025-23940buffer overflowCVE-2025-21335CVE-2025-23860CVE-2024-57704SSTIwirelessCVE-2019-3309
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook