|
161
|
-
5.0
|
MEDIUM
|
The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of …
|
NVD-CWE-Other
|
CVE-2009-3095
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.35
2.2.0
|
|
|
2.0.64
2.2.14
|
2026-04-23 09:35
2009-09-9
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
162
|
-
2.6
|
LOW
|
The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL poi…
|
CWE-476
NULL Pointer Dereference
|
CVE-2009-3094
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.35
2.2.0
|
|
|
2.0.64
2.2.14
|
2026-04-23 09:35
2009-09-9
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
163
|
-
7.1
|
HIGH
|
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a deni…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2009-1891
|
cpe:2.3:a:apache:http_server:*:*
|
2.0.35
2.2.0
|
|
|
2.0.64
2.2.12
|
2026-04-23 09:35
2009-07-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
164
|
-
7.1
|
HIGH
|
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed d…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2009-1890
|
cpe:2.3:a:apache:http_server:*:*
|
2.2.0
|
|
|
2.2.12
|
2026-04-23 09:35
2009-07-6
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
165
|
-
6.4
|
MEDIUM
|
Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (appl…
|
CWE-189
Numeric Errors
|
CVE-2009-1956
|
cpe:2.3:a:apache:http_server:*:*
|
2.2.0
|
|
|
2.2.12
|
2026-04-23 09:35
2009-06-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
166
|
7.5
5.0
|
HIGH
Network
|
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to …
|
CWE-776
XML Entity Expansion
|
CVE-2009-1955
|
cpe:2.3:a:apache:http_server:*:*
|
2.2.0
|
|
|
2.2.12
|
2026-04-23 09:35
2009-06-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
167
|
-
4.3
|
MEDIUM
|
The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-0023
|
cpe:2.3:a:apache:http_server:*:*
|
2.2.0
|
|
|
2.2.12
|
2026-04-23 09:35
2009-06-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
168
|
-
4.9
|
MEDIUM
|
The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) O…
|
CWE-16
Configuration
|
CVE-2009-1195
|
cpe:2.3:a:apache:http_server:2.2.9:*
cpe:2.3:a:apache:http_server:2.2.8:*
cpe:2.3:a:apache:http_server:2.2.7:*
|
|
|
|
2026-04-23 09:35
2009-05-29
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
169
|
-
5.0
|
MEDIUM
|
mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no…
|
NVD-CWE-noinfo
|
CVE-2009-1191
|
cpe:2.3:a:apache:http_server:2.2.11:*
|
|
|
|
|
2026-04-23 09:35
2009-04-24
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
170
|
-
4.3
|
MEDIUM
|
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versi…
|
CWE-79
Cross-site Scripting
|
CVE-2008-2939
|
cpe:2.3:a:apache:http_server:*:*
|
2.2.0
|
2.0.63
2.2.9
|
|
|
2026-04-23 09:35
2008-08-7
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|