Search for packages
| purl | pkg:deb/debian/modsecurity-apache@2.9.11-1%2Bdeb13u1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3vdu-xbqh-7ud6 | ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Content-Disposition field of a request with a multipart/form-data Content-Type header. |
CVE-2009-5031
|
| VCID-4s75-8asy-wyb1 | The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header. |
CVE-2013-2765
|
| VCID-5gw3-jywd-2qb2 | security update |
CVE-2013-5705
|
| VCID-b7s9-yu8p-hbhj | The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data. |
CVE-2012-4528
|
| VCID-fc2s-mxh1-yfeh | modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass |
CVE-2023-24021
|
| VCID-j7n8-xubx-pqfe | ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031. |
CVE-2012-2751
|
| VCID-k3vz-b9ar-37hq | mod_security: ModSecurity segmentation fault |
CVE-2025-52891
|
| VCID-kg7a-8fqh-mffc | security update |
CVE-2021-42717
|
| VCID-qrsw-p6vk-pydk | mod_security: ModSecurity Content-Type Override Vulnerability |
CVE-2025-54571
|
| VCID-sm3m-cydd-w3av | mod_security: ModSecurity Denial of Service Vulnerability |
CVE-2025-48866
|
| VCID-tyyt-k2cb-dygb | modsecurity: ModSecurity Has Possible DoS Vulnerability |
CVE-2025-47947
|
| VCID-y2r9-myqj-yye3 | ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability. |
CVE-2013-1915
|
| VCID-y8ty-2cp5-y3gm | mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass |
CVE-2022-48279
|