Filter
Software
Trustwave ModSecurityWAF bypass of the ModSecurity v3 release line
8.6
First published (updated )
Trustwave ModSecurityTrustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
7.5
EPSS
0.05%
First published (updated )
Trustwave ModSecurityTrustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and …
7.5
First published (updated )
ubuntu/modsecurity-apacheIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed an…
7.5
First published (updated )
ubuntu/modsecurity-apacheIncorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Appli…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/modsecurity-apacheModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with …
7.5
First published (updated )
Trustwave ModSecurityModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index o…
5.3
First published (updated )
debian/modsecurityModSecurity v3.0.x is affected by a Denial of Service vulnerability due to the global matching of re…
7.5
First published (updated )
Trustwave MailmarshalOS Command Injection, Command Injection
9.8
First published (updated )
Fedoraproject FedoraTrustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Trustwave Secure Web GatewayTrustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary …
10
First published (updated )
Debian Debian Linuxapache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using c…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
openSUSE openSUSEThe mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass r…
First published (updated )
Trustwave WebdefendTrustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a…
First published (updated )
Trustwave WebdefendThe application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentia…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.