Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apache vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2

CVE-2008-5515

Apache Tomcat 4.1.0 up to and including 4.1.39, 5.5.0 up to and including 5.5.27, 6.0.0 up to and including 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote maliciou...
Apache Tomcat 4.1.0Apache Tomcat 4.1.1Apache Tomcat 4.1.2Apache Tomcat 4.1.3Apache Tomcat 4.1.10Apache Tomcat 4.1.11Apache Tomcat 4.1.12Apache Tomcat 4.1.13Apache Tomcat 4.1.14Apache Tomcat 4.1.15Apache Tomcat 4.1.16Apache Tomcat 4.1.17
3.5
CVSSv2

CVE-2010-4644

Multiple memory leaks in rev_hunt.c in Apache Subversion prior to 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
Apache SubversionApache Subversion 0.6Apache Subversion 0.7Apache Subversion 0.8Apache Subversion 0.9Apache Subversion 0.10.0Apache Subversion 0.10.1Apache Subversion 0.10.2Apache Subversion 0.11.1Apache Subversion 0.12.0Apache Subversion 0.13.0Apache Subversion 0.13.1
6.8
CVSSv2

CVE-2010-4539

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion prior to 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking ...
Apache SubversionApache Subversion 0.6Apache Subversion 0.7Apache Subversion 0.8Apache Subversion 0.9Apache Subversion 0.10.0Apache Subversion 0.10.1Apache Subversion 0.10.2Apache Subversion 0.11.1Apache Subversion 0.12.0Apache Subversion 0.13.0Apache Subversion 0.13.1
5
CVSSv2

CVE-2009-0033

Apache Tomcat 4.1.0 up to and including 4.1.39, 5.5.0 up to and including 5.5.27, and 6.0.0 up to and including 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote malicious users to cause a denial of service (application outage) via a crafted re...
Apache Tomcat 4.1.0Apache Tomcat 4.1.1Apache Tomcat 4.1.2Apache Tomcat 4.1.3Apache Tomcat 4.1.4Apache Tomcat 4.1.5Apache Tomcat 4.1.6Apache Tomcat 4.1.7Apache Tomcat 4.1.8Apache Tomcat 4.1.9Apache Tomcat 4.1.10Apache Tomcat 4.1.11
4.3
CVSSv2

CVE-2009-0580

Apache Tomcat 4.1.0 up to and including 4.1.39, 5.5.0 up to and including 5.5.27, and 6.0.0 up to and including 6.0.18, when FORM authentication is used, allows remote malicious users to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of pa...
Apache Tomcat 4.1.0Apache Tomcat 4.1.1Apache Tomcat 4.1.2Apache Tomcat 4.1.3Apache Tomcat 4.1.4Apache Tomcat 4.1.5Apache Tomcat 4.1.6Apache Tomcat 4.1.7Apache Tomcat 4.1.8Apache Tomcat 4.1.9Apache Tomcat 4.1.10Apache Tomcat 4.1.11
8.8
CVSSv3

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x prior to 2.3.20 allows remote malicious users to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.
Apache Struts 2.0.1Apache Struts 2.0.2Apache Struts 2.0.3Apache Struts 2.0.4Apache Struts 2.0.5Apache Struts 2.0.6Apache Struts 2.0.7Apache Struts 2.0.8Apache Struts 2.0.9Apache Struts 2.0.10Apache Struts 2.0.11Apache Struts 2.0.11.1
4.3
CVSSv2

CVE-2012-4431

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x prior to 6.0.36 and 7.x prior to 7.0.32 allows remote malicious users to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.
Apache Tomcat 6.0Apache Tomcat 6.0.0Apache Tomcat 6.0.1Apache Tomcat 6.0.2Apache Tomcat 6.0.3Apache Tomcat 6.0.4Apache Tomcat 6.0.5Apache Tomcat 6.0.6Apache Tomcat 6.0.7Apache Tomcat 6.0.8Apache Tomcat 6.0.9Apache Tomcat 6.0.10
5
CVSSv2

CVE-2011-4858

Apache Tomcat prior to 5.5.35, 6.x prior to 6.0.35, and 7.x prior to 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sendi...
Apache Tomcat 5.5.35Apache Tomcat 6.0.0Apache Tomcat 6.0.1Apache Tomcat 6.0.2Apache Tomcat 6.0.3Apache Tomcat 6.0.4Apache Tomcat 6.0.5Apache Tomcat 6.0.6Apache Tomcat 6.0.7Apache Tomcat 6.0.8Apache Tomcat 6.0.9Apache Tomcat 6.0.10
9.8
CVSSv3

CVE-2017-9791

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
Apache Struts 2.3.1Apache Struts 2.3.1.1Apache Struts 2.3.1.2Apache Struts 2.3.3Apache Struts 2.3.4Apache Struts 2.3.4.1Apache Struts 2.3.7Apache Struts 2.3.8Apache Struts 2.3.12Apache Struts 2.3.14Apache Struts 2.3.14.1Apache Struts 2.3.14.2
4.3
CVSSv2

CVE-2013-2136

Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack prior to 4.1.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance ...
Apache CloudstackApache Cloudstack 2.0Apache Cloudstack 2.0.1Apache Cloudstack 2.1.0Apache Cloudstack 2.1.1Apache Cloudstack 2.1.2Apache Cloudstack 2.1.3Apache Cloudstack 2.1.4Apache Cloudstack 2.1.5Apache Cloudstack 2.1.6Apache Cloudstack 2.1.7Apache Cloudstack 2.1.8
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
path traversalCVE-2025-2657CVE-2025-30066CVE-2025-24813apache commons vfsCVE-2025-2478validationCVE-2025-2674code injectionmedical card generation systemmicrosoft edge (chromium-based)CVE-2025-2688cicadascms
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook