Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apache/httpd@2.2.3
Typeapache
Namespace
Namehttpd
Version2.2.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.4.42
Latest_non_vulnerable_version2.4.54
Affected_by_vulnerabilities
0
url VCID-27cw-pun8-tbay
vulnerability_id VCID-27cw-pun8-tbay
summary A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3720.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3720.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3720
reference_id
reference_type
scores
0
value 0.01573
scoring_system epss
scoring_elements 0.81954
published_at 2026-06-11T12:55:00Z
1
value 0.01573
scoring_system epss
scoring_elements 0.82015
published_at 2026-06-12T12:55:00Z
2
value 0.01742
scoring_system epss
scoring_elements 0.82998
published_at 2026-06-14T12:55:00Z
3
value 0.02085
scoring_system epss
scoring_elements 0.84428
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3720
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=531697
reference_id 531697
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=531697
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551936
reference_id 551936
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=551936
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560919
reference_id 560919
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560919
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560920
reference_id 560920
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560920
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560921
reference_id 560921
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560921
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560922
reference_id 560922
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560922
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560926
reference_id 560926
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560926
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560927
reference_id 560927
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560927
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560928
reference_id 560928
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560928
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560929
reference_id 560929
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560929
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560930
reference_id 560930
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560930
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560935
reference_id 560935
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560935
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560936
reference_id 560936
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560936
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560937
reference_id 560937
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560937
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560940
reference_id 560940
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560940
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560942
reference_id 560942
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560942
19
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560950
reference_id 560950
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560950
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601053
reference_id 601053
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601053
21
reference_url https://httpd.apache.org/security/json/CVE-2009-3720.json
reference_id CVE-2009-3720
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-3720.json
22
reference_url https://security.gentoo.org/glsa/201209-06
reference_id GLSA-201209-06
reference_type
scores
url https://security.gentoo.org/glsa/201209-06
23
reference_url https://access.redhat.com/errata/RHSA-2009:1572
reference_id RHSA-2009:1572
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1572
24
reference_url https://access.redhat.com/errata/RHSA-2009:1625
reference_id RHSA-2009:1625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1625
25
reference_url https://access.redhat.com/errata/RHSA-2010:0002
reference_id RHSA-2010:0002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0002
26
reference_url https://access.redhat.com/errata/RHSA-2011:0491
reference_id RHSA-2011:0491
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0491
27
reference_url https://access.redhat.com/errata/RHSA-2011:0492
reference_id RHSA-2011:0492
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0492
28
reference_url https://access.redhat.com/errata/RHSA-2017:3239
reference_id RHSA-2017:3239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3239
29
reference_url https://usn.ubuntu.com/890-1/
reference_id USN-890-1
reference_type
scores
url https://usn.ubuntu.com/890-1/
30
reference_url https://usn.ubuntu.com/890-2/
reference_id USN-890-2
reference_type
scores
url https://usn.ubuntu.com/890-2/
31
reference_url https://usn.ubuntu.com/890-3/
reference_id USN-890-3
reference_type
scores
url https://usn.ubuntu.com/890-3/
32
reference_url https://usn.ubuntu.com/890-4/
reference_id USN-890-4
reference_type
scores
url https://usn.ubuntu.com/890-4/
33
reference_url https://usn.ubuntu.com/890-5/
reference_id USN-890-5
reference_type
scores
url https://usn.ubuntu.com/890-5/
34
reference_url https://usn.ubuntu.com/890-6/
reference_id USN-890-6
reference_type
scores
url https://usn.ubuntu.com/890-6/
fixed_packages
0
url pkg:apache/httpd@2.2.17
purl pkg:apache/httpd@2.2.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-5384-9rhf-5yby
3
vulnerability VCID-6bsk-g6yj-2khy
4
vulnerability VCID-6fav-yrx7-r7ar
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7x6x-s2w3-xygz
7
vulnerability VCID-8qcw-mekw-buh6
8
vulnerability VCID-8vkp-k5yr-n3bn
9
vulnerability VCID-9nuk-vm33-kkha
10
vulnerability VCID-bg3g-yc4h-3bdu
11
vulnerability VCID-cm2b-nhrm-mfdr
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-dr6d-j9as-qfby
14
vulnerability VCID-e4mk-ydp9-m3bx
15
vulnerability VCID-epgm-u9j7-7bd1
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h6qp-sn1h-byap
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-m4ps-cv5v-n7fr
20
vulnerability VCID-ne55-gstx-1qfu
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-p9db-n3kt-puhp
23
vulnerability VCID-rj9n-s2a4-w7he
24
vulnerability VCID-rxv4-mugn-akhf
25
vulnerability VCID-sfx1-4tej-gqgs
26
vulnerability VCID-szmq-1zrf-mfa6
27
vulnerability VCID-uhmn-527n-fqgq
28
vulnerability VCID-uhyk-pc9e-w7cu
29
vulnerability VCID-xmt2-8ett-qbgx
30
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.17
aliases CVE-2009-3720
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-27cw-pun8-tbay
1
url VCID-2g26-cq3w-1kh4
vulnerability_id VCID-2g26-cq3w-1kh4
summary A flaw in the core subrequest process code was fixed, to always provide a shallow copy of the headers_in array to the subrequest, instead of a pointer to the parent request's array as it had for requests without request bodies. This meant all modules such as mod_headers which may manipulate the input headers for a subrequest would poison the parent request in two ways, one by modifying the parent request, which might not be intended, and second by leaving pointers to modified header fields in memory allocated to the subrequest scope, which could be freed before the main request processing was finished, resulting in a segfault or in revealing data from another request on threaded servers, such as the worker or winnt MPMs.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0434.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0434.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-0434
reference_id
reference_type
scores
0
value 0.0539
scoring_system epss
scoring_elements 0.9033
published_at 2026-06-11T12:55:00Z
1
value 0.0539
scoring_system epss
scoring_elements 0.90359
published_at 2026-06-12T12:55:00Z
2
value 0.0539
scoring_system epss
scoring_elements 0.90368
published_at 2026-06-13T12:55:00Z
3
value 0.0539
scoring_system epss
scoring_elements 0.90367
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-0434
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=570171
reference_id 570171
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=570171
4
reference_url https://httpd.apache.org/security/json/CVE-2010-0434.json
reference_id CVE-2010-0434
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2010-0434.json
5
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
6
reference_url https://access.redhat.com/errata/RHSA-2010:0168
reference_id RHSA-2010:0168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0168
7
reference_url https://access.redhat.com/errata/RHSA-2010:0175
reference_id RHSA-2010:0175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0175
8
reference_url https://access.redhat.com/errata/RHSA-2010:0396
reference_id RHSA-2010:0396
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0396
9
reference_url https://usn.ubuntu.com/908-1/
reference_id USN-908-1
reference_type
scores
url https://usn.ubuntu.com/908-1/
fixed_packages
0
url pkg:apache/httpd@2.2.15
purl pkg:apache/httpd@2.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2v5v-34s6-3fdk
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-5384-9rhf-5yby
4
vulnerability VCID-59v3-3ms3-9fg3
5
vulnerability VCID-6bsk-g6yj-2khy
6
vulnerability VCID-6fav-yrx7-r7ar
7
vulnerability VCID-7j9j-sxt1-6qa6
8
vulnerability VCID-7x6x-s2w3-xygz
9
vulnerability VCID-8bk7-w7fd-8bfv
10
vulnerability VCID-8qcw-mekw-buh6
11
vulnerability VCID-8vkp-k5yr-n3bn
12
vulnerability VCID-9nuk-vm33-kkha
13
vulnerability VCID-awb7-8p6u-2fa3
14
vulnerability VCID-bg3g-yc4h-3bdu
15
vulnerability VCID-cm2b-nhrm-mfdr
16
vulnerability VCID-dj7a-88wd-dugh
17
vulnerability VCID-dr6d-j9as-qfby
18
vulnerability VCID-e4mk-ydp9-m3bx
19
vulnerability VCID-epgm-u9j7-7bd1
20
vulnerability VCID-grnf-r71w-r3h7
21
vulnerability VCID-h6qp-sn1h-byap
22
vulnerability VCID-kg8r-vq3s-2qa4
23
vulnerability VCID-m4ps-cv5v-n7fr
24
vulnerability VCID-ne55-gstx-1qfu
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-p9db-n3kt-puhp
27
vulnerability VCID-rj9n-s2a4-w7he
28
vulnerability VCID-sfx1-4tej-gqgs
29
vulnerability VCID-szmq-1zrf-mfa6
30
vulnerability VCID-uhmn-527n-fqgq
31
vulnerability VCID-uhyk-pc9e-w7cu
32
vulnerability VCID-xmt2-8ett-qbgx
33
vulnerability VCID-xn4w-pvu5-dyhb
34
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.15
aliases CVE-2010-0434
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2g26-cq3w-1kh4
2
url VCID-2v5v-34s6-3fdk
vulnerability_id VCID-2v5v-34s6-3fdk
summary A XSS flaw affected the mod_proxy_balancer manager interface.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4558.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4558.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-4558
reference_id
reference_type
scores
0
value 0.58223
scoring_system epss
scoring_elements 0.98227
published_at 2026-06-11T12:55:00Z
1
value 0.58223
scoring_system epss
scoring_elements 0.98234
published_at 2026-06-12T12:55:00Z
2
value 0.58223
scoring_system epss
scoring_elements 0.98235
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-4558
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4558
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4558
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=915884
reference_id 915884
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=915884
4
reference_url https://httpd.apache.org/security/json/CVE-2012-4558.json
reference_id CVE-2012-4558
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2012-4558.json
5
reference_url https://access.redhat.com/errata/RHSA-2013:0815
reference_id RHSA-2013:0815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0815
6
reference_url https://access.redhat.com/errata/RHSA-2013:1011
reference_id RHSA-2013:1011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1011
7
reference_url https://access.redhat.com/errata/RHSA-2013:1012
reference_id RHSA-2013:1012
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1012
8
reference_url https://access.redhat.com/errata/RHSA-2013:1013
reference_id RHSA-2013:1013
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1013
9
reference_url https://access.redhat.com/errata/RHSA-2013:1207
reference_id RHSA-2013:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1207
10
reference_url https://access.redhat.com/errata/RHSA-2013:1208
reference_id RHSA-2013:1208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1208
11
reference_url https://access.redhat.com/errata/RHSA-2013:1209
reference_id RHSA-2013:1209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1209
12
reference_url https://usn.ubuntu.com/1765-1/
reference_id USN-1765-1
reference_type
scores
url https://usn.ubuntu.com/1765-1/
fixed_packages
0
url pkg:apache/httpd@2.2.24
purl pkg:apache/httpd@2.2.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u4s-a96g-v3aq
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-8vkp-k5yr-n3bn
3
vulnerability VCID-9nuk-vm33-kkha
4
vulnerability VCID-dj7a-88wd-dugh
5
vulnerability VCID-e4mk-ydp9-m3bx
6
vulnerability VCID-epgm-u9j7-7bd1
7
vulnerability VCID-grnf-r71w-r3h7
8
vulnerability VCID-kg8r-vq3s-2qa4
9
vulnerability VCID-nxqt-4e79-w3et
10
vulnerability VCID-rj9n-s2a4-w7he
11
vulnerability VCID-sfx1-4tej-gqgs
12
vulnerability VCID-uhmn-527n-fqgq
13
vulnerability VCID-uhyk-pc9e-w7cu
14
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.24
1
url pkg:apache/httpd@2.4.4
purl pkg:apache/httpd@2.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9nuk-vm33-kkha
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-arm8-rmce-2bec
11
vulnerability VCID-bn5d-te6p-hyf1
12
vulnerability VCID-cbky-16wm-2fee
13
vulnerability VCID-cm2b-nhrm-mfdr
14
vulnerability VCID-dj7a-88wd-dugh
15
vulnerability VCID-dk12-s4wp-suhc
16
vulnerability VCID-dr2b-7ack-wbfp
17
vulnerability VCID-e4mk-ydp9-m3bx
18
vulnerability VCID-epgm-u9j7-7bd1
19
vulnerability VCID-f1cy-ycsy-qqhc
20
vulnerability VCID-grnf-r71w-r3h7
21
vulnerability VCID-h959-hrhy-wkep
22
vulnerability VCID-kg8r-vq3s-2qa4
23
vulnerability VCID-kp2b-t25c-sqfc
24
vulnerability VCID-n82t-1jhq-8ba3
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-pc8m-gm5b-gya1
27
vulnerability VCID-r2fd-nfnk-h7gy
28
vulnerability VCID-rb9f-qwwr-v7c2
29
vulnerability VCID-rc99-4efu-tud2
30
vulnerability VCID-rj9n-s2a4-w7he
31
vulnerability VCID-sfx1-4tej-gqgs
32
vulnerability VCID-t95h-sdy4-tua1
33
vulnerability VCID-tdub-a3cg-r7fg
34
vulnerability VCID-uhmn-527n-fqgq
35
vulnerability VCID-uhyk-pc9e-w7cu
36
vulnerability VCID-usz9-qezx-9ybx
37
vulnerability VCID-wf33-hszj-akf9
38
vulnerability VCID-xmt2-8ett-qbgx
39
vulnerability VCID-y5k7-ve1j-3bfc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.4
aliases CVE-2012-4558
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2v5v-34s6-3fdk
3
url VCID-3s85-xfpq-xqbs
vulnerability_id VCID-3s85-xfpq-xqbs
summary The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the HTTP server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3304.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3304.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-3304
reference_id
reference_type
scores
0
value 0.00098
scoring_system epss
scoring_elements 0.26967
published_at 2026-06-11T12:55:00Z
1
value 0.00098
scoring_system epss
scoring_elements 0.2717
published_at 2026-06-12T12:55:00Z
2
value 0.00098
scoring_system epss
scoring_elements 0.27188
published_at 2026-06-13T12:55:00Z
3
value 0.00098
scoring_system epss
scoring_elements 0.27174
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-3304
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3304
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3304
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=245111
reference_id 245111
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=245111
4
reference_url https://httpd.apache.org/security/json/CVE-2007-3304.json
reference_id CVE-2007-3304
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-3304.json
5
reference_url https://security.gentoo.org/glsa/200711-06
reference_id GLSA-200711-06
reference_type
scores
url https://security.gentoo.org/glsa/200711-06
6
reference_url https://access.redhat.com/errata/RHSA-2007:0532
reference_id RHSA-2007:0532
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0532
7
reference_url https://access.redhat.com/errata/RHSA-2007:0556
reference_id RHSA-2007:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0556
8
reference_url https://access.redhat.com/errata/RHSA-2007:0557
reference_id RHSA-2007:0557
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0557
9
reference_url https://access.redhat.com/errata/RHSA-2007:0662
reference_id RHSA-2007:0662
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0662
10
reference_url https://access.redhat.com/errata/RHSA-2008:0263
reference_id RHSA-2008:0263
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0263
11
reference_url https://access.redhat.com/errata/RHSA-2008:0523
reference_id RHSA-2008:0523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0523
12
reference_url https://usn.ubuntu.com/499-1/
reference_id USN-499-1
reference_type
scores
url https://usn.ubuntu.com/499-1/
fixed_packages
0
url pkg:apache/httpd@2.2.6
purl pkg:apache/httpd@2.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-9qsz-zr6r-z3c3
18
vulnerability VCID-awb7-8p6u-2fa3
19
vulnerability VCID-bame-16es-e7a2
20
vulnerability VCID-bg3g-yc4h-3bdu
21
vulnerability VCID-cbcf-d64d-8bd2
22
vulnerability VCID-cm2b-nhrm-mfdr
23
vulnerability VCID-dj7a-88wd-dugh
24
vulnerability VCID-dkh9-b39c-uqgz
25
vulnerability VCID-dr6d-j9as-qfby
26
vulnerability VCID-e4mk-ydp9-m3bx
27
vulnerability VCID-ehc1-xda2-8bb3
28
vulnerability VCID-epgm-u9j7-7bd1
29
vulnerability VCID-fsva-ef97-87hs
30
vulnerability VCID-fwbt-3uqc-sqf7
31
vulnerability VCID-g655-us3x-37c2
32
vulnerability VCID-grnf-r71w-r3h7
33
vulnerability VCID-h6qp-sn1h-byap
34
vulnerability VCID-hv8d-3r75-abfb
35
vulnerability VCID-kg8r-vq3s-2qa4
36
vulnerability VCID-m7y1-9mdy-6bfx
37
vulnerability VCID-n9f3-w699-97fe
38
vulnerability VCID-ne55-gstx-1qfu
39
vulnerability VCID-nxqt-4e79-w3et
40
vulnerability VCID-p9db-n3kt-puhp
41
vulnerability VCID-pfc7-ap3y-u7ds
42
vulnerability VCID-rj9n-s2a4-w7he
43
vulnerability VCID-sfx1-4tej-gqgs
44
vulnerability VCID-szmq-1zrf-mfa6
45
vulnerability VCID-uhmn-527n-fqgq
46
vulnerability VCID-uhyk-pc9e-w7cu
47
vulnerability VCID-ukk2-3cpg-7ugy
48
vulnerability VCID-vu91-nh94-nkb2
49
vulnerability VCID-vy92-b4as-a7hp
50
vulnerability VCID-w4b1-tu6b-mkc7
51
vulnerability VCID-xmt2-8ett-qbgx
52
vulnerability VCID-xn4w-pvu5-dyhb
53
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.6
aliases CVE-2007-3304
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3s85-xfpq-xqbs
4
url VCID-3u4s-a96g-v3aq
vulnerability_id VCID-3u4s-a96g-v3aq
summary HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. This fix adds the "MergeTrailers" directive to restore legacy behavior.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5704.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5704.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-5704
reference_id
reference_type
scores
0
value 0.65044
scoring_system epss
scoring_elements 0.98499
published_at 2026-06-11T12:55:00Z
1
value 0.65044
scoring_system epss
scoring_elements 0.98504
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-5704
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5704
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5704
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1082903
reference_id 1082903
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1082903
4
reference_url https://httpd.apache.org/security/json/CVE-2013-5704.json
reference_id CVE-2013-5704
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2013-5704.json
5
reference_url https://security.gentoo.org/glsa/201504-03
reference_id GLSA-201504-03
reference_type
scores
url https://security.gentoo.org/glsa/201504-03
6
reference_url https://access.redhat.com/errata/RHSA-2014:1972
reference_id RHSA-2014:1972
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1972
7
reference_url https://access.redhat.com/errata/RHSA-2015:0325
reference_id RHSA-2015:0325
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0325
8
reference_url https://access.redhat.com/errata/RHSA-2015:1249
reference_id RHSA-2015:1249
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1249
9
reference_url https://access.redhat.com/errata/RHSA-2015:2659
reference_id RHSA-2015:2659
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2659
10
reference_url https://access.redhat.com/errata/RHSA-2015:2660
reference_id RHSA-2015:2660
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2660
11
reference_url https://access.redhat.com/errata/RHSA-2015:2661
reference_id RHSA-2015:2661
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2661
12
reference_url https://access.redhat.com/errata/RHSA-2016:0061
reference_id RHSA-2016:0061
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0061
13
reference_url https://access.redhat.com/errata/RHSA-2016:0062
reference_id RHSA-2016:0062
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0062
14
reference_url https://usn.ubuntu.com/2523-1/
reference_id USN-2523-1
reference_type
scores
url https://usn.ubuntu.com/2523-1/
fixed_packages
0
url pkg:apache/httpd@2.2.29
purl pkg:apache/httpd@2.2.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7j9j-sxt1-6qa6
1
vulnerability VCID-8vkp-k5yr-n3bn
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-epgm-u9j7-7bd1
4
vulnerability VCID-grnf-r71w-r3h7
5
vulnerability VCID-kg8r-vq3s-2qa4
6
vulnerability VCID-nxqt-4e79-w3et
7
vulnerability VCID-sfx1-4tej-gqgs
8
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.29
1
url pkg:apache/httpd@2.4.12
purl pkg:apache/httpd@2.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-43j2-q5rg-7qay
3
vulnerability VCID-4x4s-8qeu-13h3
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9wx3-62cp-fuh8
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-bn5d-te6p-hyf1
11
vulnerability VCID-dk12-s4wp-suhc
12
vulnerability VCID-dr2b-7ack-wbfp
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-epgm-u9j7-7bd1
15
vulnerability VCID-f1cy-ycsy-qqhc
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-kp2b-t25c-sqfc
20
vulnerability VCID-n8qk-qws2-9ydv
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-qjxt-ekff-ykgk
23
vulnerability VCID-rb9f-qwwr-v7c2
24
vulnerability VCID-rc99-4efu-tud2
25
vulnerability VCID-sfx1-4tej-gqgs
26
vulnerability VCID-t95h-sdy4-tua1
27
vulnerability VCID-tdub-a3cg-r7fg
28
vulnerability VCID-uhyk-pc9e-w7cu
29
vulnerability VCID-usz9-qezx-9ybx
30
vulnerability VCID-wf33-hszj-akf9
31
vulnerability VCID-y5k7-ve1j-3bfc
32
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.12
aliases CVE-2013-5704
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3u4s-a96g-v3aq
5
url VCID-435a-8xfp-6qes
vulnerability_id VCID-435a-8xfp-6qes
summary A flaw was found in the handling of excessive interim responses from an origin server when using mod_proxy_http. A remote attacker could cause a denial of service or high memory usage.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2364.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2364.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-2364
reference_id
reference_type
scores
0
value 0.02213
scoring_system epss
scoring_elements 0.84824
published_at 2026-06-11T12:55:00Z
1
value 0.02213
scoring_system epss
scoring_elements 0.84877
published_at 2026-06-14T12:55:00Z
2
value 0.02213
scoring_system epss
scoring_elements 0.84885
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-2364
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=451615
reference_id 451615
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=451615
4
reference_url https://httpd.apache.org/security/json/CVE-2008-2364.json
reference_id CVE-2008-2364
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2008-2364.json
5
reference_url https://security.gentoo.org/glsa/200807-06
reference_id GLSA-200807-06
reference_type
scores
url https://security.gentoo.org/glsa/200807-06
6
reference_url https://access.redhat.com/errata/RHSA-2008:0967
reference_id RHSA-2008:0967
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0967
7
reference_url https://usn.ubuntu.com/731-1/
reference_id USN-731-1
reference_type
scores
url https://usn.ubuntu.com/731-1/
fixed_packages
0
url pkg:apache/httpd@2.2.9
purl pkg:apache/httpd@2.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-4zr3-hrfp-ekeh
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-5bxn-x6ky-s3az
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8bk7-w7fd-8bfv
14
vulnerability VCID-8qcw-mekw-buh6
15
vulnerability VCID-8vkp-k5yr-n3bn
16
vulnerability VCID-8zzs-cvkw-nubr
17
vulnerability VCID-9nuk-vm33-kkha
18
vulnerability VCID-awb7-8p6u-2fa3
19
vulnerability VCID-bg3g-yc4h-3bdu
20
vulnerability VCID-cbcf-d64d-8bd2
21
vulnerability VCID-cm2b-nhrm-mfdr
22
vulnerability VCID-dj7a-88wd-dugh
23
vulnerability VCID-dkh9-b39c-uqgz
24
vulnerability VCID-dr6d-j9as-qfby
25
vulnerability VCID-e4mk-ydp9-m3bx
26
vulnerability VCID-ehc1-xda2-8bb3
27
vulnerability VCID-epgm-u9j7-7bd1
28
vulnerability VCID-fsva-ef97-87hs
29
vulnerability VCID-fwbt-3uqc-sqf7
30
vulnerability VCID-grnf-r71w-r3h7
31
vulnerability VCID-h6qp-sn1h-byap
32
vulnerability VCID-hv8d-3r75-abfb
33
vulnerability VCID-kg8r-vq3s-2qa4
34
vulnerability VCID-m7y1-9mdy-6bfx
35
vulnerability VCID-ne55-gstx-1qfu
36
vulnerability VCID-nxqt-4e79-w3et
37
vulnerability VCID-p9db-n3kt-puhp
38
vulnerability VCID-rj9n-s2a4-w7he
39
vulnerability VCID-sfx1-4tej-gqgs
40
vulnerability VCID-szmq-1zrf-mfa6
41
vulnerability VCID-uhmn-527n-fqgq
42
vulnerability VCID-uhyk-pc9e-w7cu
43
vulnerability VCID-ukk2-3cpg-7ugy
44
vulnerability VCID-vu91-nh94-nkb2
45
vulnerability VCID-vy92-b4as-a7hp
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.9
aliases CVE-2008-2364
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-435a-8xfp-6qes
6
url VCID-4zr3-hrfp-ekeh
vulnerability_id VCID-4zr3-hrfp-ekeh
summary Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_negotiation and allow untrusted uploads to locations which have MultiViews enabled.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0456.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0456.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-0456
reference_id
reference_type
scores
0
value 0.15455
scoring_system epss
scoring_elements 0.94814
published_at 2026-06-11T12:55:00Z
1
value 0.15455
scoring_system epss
scoring_elements 0.94831
published_at 2026-06-12T12:55:00Z
2
value 0.15455
scoring_system epss
scoring_elements 0.94837
published_at 2026-06-13T12:55:00Z
3
value 0.15455
scoring_system epss
scoring_elements 0.94838
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-0456
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0456
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0456
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=879292
reference_id 879292
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=879292
4
reference_url https://httpd.apache.org/security/json/CVE-2008-0456.json
reference_id CVE-2008-0456
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2008-0456.json
5
reference_url https://security.gentoo.org/glsa/200803-19
reference_id GLSA-200803-19
reference_type
scores
url https://security.gentoo.org/glsa/200803-19
6
reference_url https://access.redhat.com/errata/RHSA-2013:0130
reference_id RHSA-2013:0130
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0130
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2008-0456
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4zr3-hrfp-ekeh
7
url VCID-59v3-3ms3-9fg3
vulnerability_id VCID-59v3-3ms3-9fg3
summary A flaw was found in the handling of requests by mod_cache (2.2) and mod_dav (2.0 and 2.2). A malicious remote attacker could send a carefully crafted request and cause a httpd child process to crash. This crash would only be a denial of service if using the worker MPM. This issue is further mitigated as mod_dav is only affected by requests that are most likely to be authenticated, and mod_cache is only affected if the uncommon "CacheIgnoreURLSessionIdentifiers" directive, introduced in version 2.2.14, is used.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1452.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1452.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-1452
reference_id
reference_type
scores
0
value 0.13868
scoring_system epss
scoring_elements 0.94464
published_at 2026-06-11T12:55:00Z
1
value 0.13868
scoring_system epss
scoring_elements 0.94482
published_at 2026-06-12T12:55:00Z
2
value 0.13868
scoring_system epss
scoring_elements 0.94489
published_at 2026-06-13T12:55:00Z
3
value 0.13868
scoring_system epss
scoring_elements 0.9449
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-1452
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=618189
reference_id 618189
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=618189
4
reference_url https://httpd.apache.org/security/json/CVE-2010-1452.json
reference_id CVE-2010-1452
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2010-1452.json
5
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
6
reference_url https://access.redhat.com/errata/RHSA-2010:0659
reference_id RHSA-2010:0659
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0659
7
reference_url https://usn.ubuntu.com/1021-1/
reference_id USN-1021-1
reference_type
scores
url https://usn.ubuntu.com/1021-1/
fixed_packages
0
url pkg:apache/httpd@2.2.16
purl pkg:apache/httpd@2.2.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2v5v-34s6-3fdk
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-5384-9rhf-5yby
4
vulnerability VCID-6bsk-g6yj-2khy
5
vulnerability VCID-6fav-yrx7-r7ar
6
vulnerability VCID-7j9j-sxt1-6qa6
7
vulnerability VCID-7x6x-s2w3-xygz
8
vulnerability VCID-8qcw-mekw-buh6
9
vulnerability VCID-8vkp-k5yr-n3bn
10
vulnerability VCID-9nuk-vm33-kkha
11
vulnerability VCID-awb7-8p6u-2fa3
12
vulnerability VCID-bg3g-yc4h-3bdu
13
vulnerability VCID-cm2b-nhrm-mfdr
14
vulnerability VCID-dj7a-88wd-dugh
15
vulnerability VCID-dr6d-j9as-qfby
16
vulnerability VCID-e4mk-ydp9-m3bx
17
vulnerability VCID-epgm-u9j7-7bd1
18
vulnerability VCID-grnf-r71w-r3h7
19
vulnerability VCID-h6qp-sn1h-byap
20
vulnerability VCID-kg8r-vq3s-2qa4
21
vulnerability VCID-m4ps-cv5v-n7fr
22
vulnerability VCID-ne55-gstx-1qfu
23
vulnerability VCID-nxqt-4e79-w3et
24
vulnerability VCID-p9db-n3kt-puhp
25
vulnerability VCID-rj9n-s2a4-w7he
26
vulnerability VCID-sfx1-4tej-gqgs
27
vulnerability VCID-szmq-1zrf-mfa6
28
vulnerability VCID-uhmn-527n-fqgq
29
vulnerability VCID-uhyk-pc9e-w7cu
30
vulnerability VCID-xmt2-8ett-qbgx
31
vulnerability VCID-xn4w-pvu5-dyhb
32
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.16
aliases CVE-2010-1452
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-59v3-3ms3-9fg3
8
url VCID-6bsk-g6yj-2khy
vulnerability_id VCID-6bsk-g6yj-2khy
summary A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to crash at shutdown rather than terminate cleanly.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0031.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0031.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0031
reference_id
reference_type
scores
0
value 0.01499
scoring_system epss
scoring_elements 0.81535
published_at 2026-06-11T12:55:00Z
1
value 0.01499
scoring_system epss
scoring_elements 0.81595
published_at 2026-06-14T12:55:00Z
2
value 0.01499
scoring_system epss
scoring_elements 0.81604
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0031
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=773744
reference_id 773744
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=773744
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41768.txt
reference_id CVE-2012-0031
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41768.txt
5
reference_url https://httpd.apache.org/security/json/CVE-2012-0031.json
reference_id CVE-2012-0031
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2012-0031.json
6
reference_url http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/
reference_id CVE-2012-0031
reference_type exploit
scores
url http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/
7
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
8
reference_url https://access.redhat.com/errata/RHSA-2012:0128
reference_id RHSA-2012:0128
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0128
9
reference_url https://access.redhat.com/errata/RHSA-2012:0323
reference_id RHSA-2012:0323
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0323
10
reference_url https://access.redhat.com/errata/RHSA-2012:0542
reference_id RHSA-2012:0542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0542
11
reference_url https://access.redhat.com/errata/RHSA-2012:0543
reference_id RHSA-2012:0543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0543
12
reference_url https://usn.ubuntu.com/1368-1/
reference_id USN-1368-1
reference_type
scores
url https://usn.ubuntu.com/1368-1/
fixed_packages
0
url pkg:apache/httpd@2.2.22
purl pkg:apache/httpd@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-7x6x-s2w3-xygz
5
vulnerability VCID-8qcw-mekw-buh6
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9nuk-vm33-kkha
8
vulnerability VCID-cm2b-nhrm-mfdr
9
vulnerability VCID-dj7a-88wd-dugh
10
vulnerability VCID-e4mk-ydp9-m3bx
11
vulnerability VCID-epgm-u9j7-7bd1
12
vulnerability VCID-grnf-r71w-r3h7
13
vulnerability VCID-kg8r-vq3s-2qa4
14
vulnerability VCID-nxqt-4e79-w3et
15
vulnerability VCID-p9db-n3kt-puhp
16
vulnerability VCID-rj9n-s2a4-w7he
17
vulnerability VCID-sfx1-4tej-gqgs
18
vulnerability VCID-uhmn-527n-fqgq
19
vulnerability VCID-uhyk-pc9e-w7cu
20
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.22
aliases CVE-2012-0031
risk_score 4.2
exploitability 2.0
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6bsk-g6yj-2khy
9
url VCID-6fav-yrx7-r7ar
vulnerability_id VCID-6fav-yrx7-r7ar
summary Various XSS flaws due to unescaped hostnames and URIs HTML output in mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3499.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3499.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-3499
reference_id
reference_type
scores
0
value 0.21581
scoring_system epss
scoring_elements 0.95849
published_at 2026-06-11T12:55:00Z
1
value 0.21581
scoring_system epss
scoring_elements 0.95863
published_at 2026-06-13T12:55:00Z
2
value 0.21581
scoring_system epss
scoring_elements 0.95866
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-3499
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=915883
reference_id 915883
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=915883
4
reference_url https://httpd.apache.org/security/json/CVE-2012-3499.json
reference_id CVE-2012-3499
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2012-3499.json
5
reference_url https://access.redhat.com/errata/RHSA-2013:0815
reference_id RHSA-2013:0815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0815
6
reference_url https://access.redhat.com/errata/RHSA-2013:1011
reference_id RHSA-2013:1011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1011
7
reference_url https://access.redhat.com/errata/RHSA-2013:1012
reference_id RHSA-2013:1012
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1012
8
reference_url https://access.redhat.com/errata/RHSA-2013:1013
reference_id RHSA-2013:1013
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1013
9
reference_url https://access.redhat.com/errata/RHSA-2013:1207
reference_id RHSA-2013:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1207
10
reference_url https://access.redhat.com/errata/RHSA-2013:1208
reference_id RHSA-2013:1208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1208
11
reference_url https://access.redhat.com/errata/RHSA-2013:1209
reference_id RHSA-2013:1209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1209
12
reference_url https://usn.ubuntu.com/1765-1/
reference_id USN-1765-1
reference_type
scores
url https://usn.ubuntu.com/1765-1/
fixed_packages
0
url pkg:apache/httpd@2.2.24
purl pkg:apache/httpd@2.2.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u4s-a96g-v3aq
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-8vkp-k5yr-n3bn
3
vulnerability VCID-9nuk-vm33-kkha
4
vulnerability VCID-dj7a-88wd-dugh
5
vulnerability VCID-e4mk-ydp9-m3bx
6
vulnerability VCID-epgm-u9j7-7bd1
7
vulnerability VCID-grnf-r71w-r3h7
8
vulnerability VCID-kg8r-vq3s-2qa4
9
vulnerability VCID-nxqt-4e79-w3et
10
vulnerability VCID-rj9n-s2a4-w7he
11
vulnerability VCID-sfx1-4tej-gqgs
12
vulnerability VCID-uhmn-527n-fqgq
13
vulnerability VCID-uhyk-pc9e-w7cu
14
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.24
1
url pkg:apache/httpd@2.4.4
purl pkg:apache/httpd@2.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9nuk-vm33-kkha
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-arm8-rmce-2bec
11
vulnerability VCID-bn5d-te6p-hyf1
12
vulnerability VCID-cbky-16wm-2fee
13
vulnerability VCID-cm2b-nhrm-mfdr
14
vulnerability VCID-dj7a-88wd-dugh
15
vulnerability VCID-dk12-s4wp-suhc
16
vulnerability VCID-dr2b-7ack-wbfp
17
vulnerability VCID-e4mk-ydp9-m3bx
18
vulnerability VCID-epgm-u9j7-7bd1
19
vulnerability VCID-f1cy-ycsy-qqhc
20
vulnerability VCID-grnf-r71w-r3h7
21
vulnerability VCID-h959-hrhy-wkep
22
vulnerability VCID-kg8r-vq3s-2qa4
23
vulnerability VCID-kp2b-t25c-sqfc
24
vulnerability VCID-n82t-1jhq-8ba3
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-pc8m-gm5b-gya1
27
vulnerability VCID-r2fd-nfnk-h7gy
28
vulnerability VCID-rb9f-qwwr-v7c2
29
vulnerability VCID-rc99-4efu-tud2
30
vulnerability VCID-rj9n-s2a4-w7he
31
vulnerability VCID-sfx1-4tej-gqgs
32
vulnerability VCID-t95h-sdy4-tua1
33
vulnerability VCID-tdub-a3cg-r7fg
34
vulnerability VCID-uhmn-527n-fqgq
35
vulnerability VCID-uhyk-pc9e-w7cu
36
vulnerability VCID-usz9-qezx-9ybx
37
vulnerability VCID-wf33-hszj-akf9
38
vulnerability VCID-xmt2-8ett-qbgx
39
vulnerability VCID-y5k7-ve1j-3bfc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.4
aliases CVE-2012-3499
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6fav-yrx7-r7ar
10
url VCID-6x9n-8arm-3kbk
vulnerability_id VCID-6x9n-8arm-3kbk
summary A flaw was found with within mod_isapi which would attempt to unload the ISAPI dll when it encountered various error states. This could leave the callbacks in an undefined state and result in a segfault. On Windows platforms using mod_isapi, a remote attacker could send a malicious request to trigger this issue, and as win32 MPM runs only one process, this would result in a denial of service, and potentially allow arbitrary code execution.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-0425
reference_id
reference_type
scores
0
value 0.86822
scoring_system epss
scoring_elements 0.99447
published_at 2026-06-11T12:55:00Z
1
value 0.86822
scoring_system epss
scoring_elements 0.99449
published_at 2026-06-12T12:55:00Z
2
value 0.86822
scoring_system epss
scoring_elements 0.9945
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-0425
1
reference_url https://httpd.apache.org/security/json/CVE-2010-0425.json
reference_id CVE-2010-0425
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2010-0425.json
2
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/11650.c
reference_id CVE-2010-0425;OSVDB-62674
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/11650.c
3
reference_url http://www.senseofsecurity.com.au/advisories/SOS-10-002
reference_id CVE-2010-0425;OSVDB-62674
reference_type exploit
scores
url http://www.senseofsecurity.com.au/advisories/SOS-10-002
fixed_packages
0
url pkg:apache/httpd@2.2.15
purl pkg:apache/httpd@2.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2v5v-34s6-3fdk
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-5384-9rhf-5yby
4
vulnerability VCID-59v3-3ms3-9fg3
5
vulnerability VCID-6bsk-g6yj-2khy
6
vulnerability VCID-6fav-yrx7-r7ar
7
vulnerability VCID-7j9j-sxt1-6qa6
8
vulnerability VCID-7x6x-s2w3-xygz
9
vulnerability VCID-8bk7-w7fd-8bfv
10
vulnerability VCID-8qcw-mekw-buh6
11
vulnerability VCID-8vkp-k5yr-n3bn
12
vulnerability VCID-9nuk-vm33-kkha
13
vulnerability VCID-awb7-8p6u-2fa3
14
vulnerability VCID-bg3g-yc4h-3bdu
15
vulnerability VCID-cm2b-nhrm-mfdr
16
vulnerability VCID-dj7a-88wd-dugh
17
vulnerability VCID-dr6d-j9as-qfby
18
vulnerability VCID-e4mk-ydp9-m3bx
19
vulnerability VCID-epgm-u9j7-7bd1
20
vulnerability VCID-grnf-r71w-r3h7
21
vulnerability VCID-h6qp-sn1h-byap
22
vulnerability VCID-kg8r-vq3s-2qa4
23
vulnerability VCID-m4ps-cv5v-n7fr
24
vulnerability VCID-ne55-gstx-1qfu
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-p9db-n3kt-puhp
27
vulnerability VCID-rj9n-s2a4-w7he
28
vulnerability VCID-sfx1-4tej-gqgs
29
vulnerability VCID-szmq-1zrf-mfa6
30
vulnerability VCID-uhmn-527n-fqgq
31
vulnerability VCID-uhyk-pc9e-w7cu
32
vulnerability VCID-xmt2-8ett-qbgx
33
vulnerability VCID-xn4w-pvu5-dyhb
34
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.15
aliases CVE-2010-0425
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6x9n-8arm-3kbk
11
url VCID-7j8b-zqfh-byd8
vulnerability_id VCID-7j8b-zqfh-byd8
summary A denial of service flaw was found in the bundled copy of the APR-util library Extensible Markup Language (XML) parser. A remote attacker could create a specially-crafted XML document that would cause excessive memory consumption when processed by the XML decoding engine.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-1955
reference_id
reference_type
scores
0
value 0.02006
scoring_system epss
scoring_elements 0.84128
published_at 2026-06-13T12:55:00Z
1
value 0.02006
scoring_system epss
scoring_elements 0.84123
published_at 2026-06-14T12:55:00Z
2
value 0.02329
scoring_system epss
scoring_elements 0.85174
published_at 2026-06-11T12:55:00Z
3
value 0.02329
scoring_system epss
scoring_elements 0.85227
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-1955
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=504555
reference_id 504555
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=504555
4
reference_url https://httpd.apache.org/security/json/CVE-2009-1955.json
reference_id CVE-2009-1955
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-1955.json
5
reference_url https://security.gentoo.org/glsa/200907-03
reference_id GLSA-200907-03
reference_type
scores
url https://security.gentoo.org/glsa/200907-03
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/8842.pl
reference_id OSVDB-55057;CVE-2009-1955
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/8842.pl
7
reference_url https://access.redhat.com/errata/RHSA-2009:1107
reference_id RHSA-2009:1107
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1107
8
reference_url https://access.redhat.com/errata/RHSA-2009:1108
reference_id RHSA-2009:1108
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1108
9
reference_url https://access.redhat.com/errata/RHSA-2009:1160
reference_id RHSA-2009:1160
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1160
10
reference_url https://usn.ubuntu.com/786-1/
reference_id USN-786-1
reference_type
scores
url https://usn.ubuntu.com/786-1/
11
reference_url https://usn.ubuntu.com/787-1/
reference_id USN-787-1
reference_type
scores
url https://usn.ubuntu.com/787-1/
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2009-1955
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7j8b-zqfh-byd8
12
url VCID-7j9j-sxt1-6qa6
vulnerability_id VCID-7j9j-sxt1-6qa6
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3167.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3167.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-3167
reference_id
reference_type
scores
0
value 0.08717
scoring_system epss
scoring_elements 0.92703
published_at 2026-06-14T12:55:00Z
1
value 0.08717
scoring_system epss
scoring_elements 0.92676
published_at 2026-06-11T12:55:00Z
2
value 0.08717
scoring_system epss
scoring_elements 0.92701
published_at 2026-06-12T12:55:00Z
3
value 0.08717
scoring_system epss
scoring_elements 0.92704
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-3167
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7668
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7668
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
1
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1463194
reference_id 1463194
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1463194
8
reference_url https://security.archlinux.org/ASA-201706-34
reference_id ASA-201706-34
reference_type
scores
url https://security.archlinux.org/ASA-201706-34
9
reference_url https://security.archlinux.org/AVG-316
reference_id AVG-316
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-316
10
reference_url https://httpd.apache.org/security/json/CVE-2017-3167.json
reference_id CVE-2017-3167
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2017-3167.json
11
reference_url https://security.gentoo.org/glsa/201710-32
reference_id GLSA-201710-32
reference_type
scores
url https://security.gentoo.org/glsa/201710-32
12
reference_url https://access.redhat.com/errata/RHSA-2017:2478
reference_id RHSA-2017:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2478
13
reference_url https://access.redhat.com/errata/RHSA-2017:2479
reference_id RHSA-2017:2479
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2479
14
reference_url https://access.redhat.com/errata/RHSA-2017:2483
reference_id RHSA-2017:2483
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2483
15
reference_url https://access.redhat.com/errata/RHSA-2017:3193
reference_id RHSA-2017:3193
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3193
16
reference_url https://access.redhat.com/errata/RHSA-2017:3194
reference_id RHSA-2017:3194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3194
17
reference_url https://access.redhat.com/errata/RHSA-2017:3195
reference_id RHSA-2017:3195
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3195
18
reference_url https://access.redhat.com/errata/RHSA-2017:3475
reference_id RHSA-2017:3475
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3475
19
reference_url https://access.redhat.com/errata/RHSA-2017:3476
reference_id RHSA-2017:3476
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3476
20
reference_url https://access.redhat.com/errata/RHSA-2017:3477
reference_id RHSA-2017:3477
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3477
21
reference_url https://usn.ubuntu.com/3340-1/
reference_id USN-3340-1
reference_type
scores
url https://usn.ubuntu.com/3340-1/
22
reference_url https://usn.ubuntu.com/3373-1/
reference_id USN-3373-1
reference_type
scores
url https://usn.ubuntu.com/3373-1/
fixed_packages
0
url pkg:apache/httpd@2.2.34
purl pkg:apache/httpd@2.2.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-grnf-r71w-r3h7
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.34
1
url pkg:apache/httpd@2.4.26
purl pkg:apache/httpd@2.4.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7xcn-c8p4-j7ec
5
vulnerability VCID-8vas-wy6r-pkda
6
vulnerability VCID-9e8m-yzr3-pbgz
7
vulnerability VCID-9wx3-62cp-fuh8
8
vulnerability VCID-afat-n93z-8qeq
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-dk12-s4wp-suhc
11
vulnerability VCID-e4mk-ydp9-m3bx
12
vulnerability VCID-ea8s-ercf-qfdx
13
vulnerability VCID-ern3-8585-c7hn
14
vulnerability VCID-gqvc-a75w-dqej
15
vulnerability VCID-grnf-r71w-r3h7
16
vulnerability VCID-h959-hrhy-wkep
17
vulnerability VCID-kp2b-t25c-sqfc
18
vulnerability VCID-mzxz-ujfq-qucw
19
vulnerability VCID-n8qk-qws2-9ydv
20
vulnerability VCID-pr6s-p29g-k3hv
21
vulnerability VCID-qw6u-prup-eqar
22
vulnerability VCID-rb9f-qwwr-v7c2
23
vulnerability VCID-rc99-4efu-tud2
24
vulnerability VCID-t95h-sdy4-tua1
25
vulnerability VCID-taua-zv9g-7kck
26
vulnerability VCID-tdub-a3cg-r7fg
27
vulnerability VCID-usz9-qezx-9ybx
28
vulnerability VCID-wf33-hszj-akf9
29
vulnerability VCID-xj85-t7py-93cf
30
vulnerability VCID-y5k7-ve1j-3bfc
31
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.26
aliases CVE-2017-3167
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7j9j-sxt1-6qa6
13
url VCID-7x6x-s2w3-xygz
vulnerability_id VCID-7x6x-s2w3-xygz
summary Possible XSS for sites which use mod_negotiation and allow untrusted uploads to locations which have MultiViews enabled. Note: This issue is also known as CVE-2008-0455.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2687.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2687.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-2687
reference_id
reference_type
scores
0
value 0.0466
scoring_system epss
scoring_elements 0.89553
published_at 2026-06-11T12:55:00Z
1
value 0.0466
scoring_system epss
scoring_elements 0.89587
published_at 2026-06-12T12:55:00Z
2
value 0.0466
scoring_system epss
scoring_elements 0.89594
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-2687
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=850794
reference_id 850794
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=850794
4
reference_url https://httpd.apache.org/security/json/CVE-2012-2687.json
reference_id CVE-2012-2687
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2012-2687.json
5
reference_url https://access.redhat.com/errata/RHSA-2012:1591
reference_id RHSA-2012:1591
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:1591
6
reference_url https://access.redhat.com/errata/RHSA-2012:1592
reference_id RHSA-2012:1592
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:1592
7
reference_url https://access.redhat.com/errata/RHSA-2012:1594
reference_id RHSA-2012:1594
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:1594
8
reference_url https://access.redhat.com/errata/RHSA-2013:0130
reference_id RHSA-2013:0130
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0130
9
reference_url https://access.redhat.com/errata/RHSA-2013:0512
reference_id RHSA-2013:0512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0512
10
reference_url https://usn.ubuntu.com/1627-1/
reference_id USN-1627-1
reference_type
scores
url https://usn.ubuntu.com/1627-1/
fixed_packages
0
url pkg:apache/httpd@2.2.23
purl pkg:apache/httpd@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-8vkp-k5yr-n3bn
5
vulnerability VCID-9nuk-vm33-kkha
6
vulnerability VCID-cm2b-nhrm-mfdr
7
vulnerability VCID-dj7a-88wd-dugh
8
vulnerability VCID-e4mk-ydp9-m3bx
9
vulnerability VCID-epgm-u9j7-7bd1
10
vulnerability VCID-grnf-r71w-r3h7
11
vulnerability VCID-kg8r-vq3s-2qa4
12
vulnerability VCID-nxqt-4e79-w3et
13
vulnerability VCID-p9db-n3kt-puhp
14
vulnerability VCID-rj9n-s2a4-w7he
15
vulnerability VCID-sfx1-4tej-gqgs
16
vulnerability VCID-uhmn-527n-fqgq
17
vulnerability VCID-uhyk-pc9e-w7cu
18
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.23
1
url pkg:apache/httpd@2.4.3
purl pkg:apache/httpd@2.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-2w8b-3gmt-qff7
2
vulnerability VCID-3dh3-8wr4-uqcd
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-43j2-q5rg-7qay
5
vulnerability VCID-6fav-yrx7-r7ar
6
vulnerability VCID-7j9j-sxt1-6qa6
7
vulnerability VCID-7xcn-c8p4-j7ec
8
vulnerability VCID-8vkp-k5yr-n3bn
9
vulnerability VCID-9e8m-yzr3-pbgz
10
vulnerability VCID-9nuk-vm33-kkha
11
vulnerability VCID-9wx3-62cp-fuh8
12
vulnerability VCID-arm8-rmce-2bec
13
vulnerability VCID-bn5d-te6p-hyf1
14
vulnerability VCID-cbky-16wm-2fee
15
vulnerability VCID-cm2b-nhrm-mfdr
16
vulnerability VCID-dj7a-88wd-dugh
17
vulnerability VCID-dk12-s4wp-suhc
18
vulnerability VCID-dr2b-7ack-wbfp
19
vulnerability VCID-e4mk-ydp9-m3bx
20
vulnerability VCID-epgm-u9j7-7bd1
21
vulnerability VCID-f1cy-ycsy-qqhc
22
vulnerability VCID-grnf-r71w-r3h7
23
vulnerability VCID-h959-hrhy-wkep
24
vulnerability VCID-kg8r-vq3s-2qa4
25
vulnerability VCID-kp2b-t25c-sqfc
26
vulnerability VCID-n82t-1jhq-8ba3
27
vulnerability VCID-nxqt-4e79-w3et
28
vulnerability VCID-pc8m-gm5b-gya1
29
vulnerability VCID-r2fd-nfnk-h7gy
30
vulnerability VCID-rb9f-qwwr-v7c2
31
vulnerability VCID-rc99-4efu-tud2
32
vulnerability VCID-rj9n-s2a4-w7he
33
vulnerability VCID-sfx1-4tej-gqgs
34
vulnerability VCID-t95h-sdy4-tua1
35
vulnerability VCID-tdub-a3cg-r7fg
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-usz9-qezx-9ybx
39
vulnerability VCID-wf33-hszj-akf9
40
vulnerability VCID-xmt2-8ett-qbgx
41
vulnerability VCID-y5k7-ve1j-3bfc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.3
aliases CVE-2012-2687
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7x6x-s2w3-xygz
14
url VCID-8qcw-mekw-buh6
vulnerability_id VCID-8qcw-mekw-buh6
summary Insecure handling of LD_LIBRARY_PATH was found that could lead to the current working directory to be searched for DSOs. This could allow a local user to execute code as root if an administrator runs apachectl from an untrusted directory.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0883.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0883.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0883
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41564
published_at 2026-06-11T12:55:00Z
1
value 0.00197
scoring_system epss
scoring_elements 0.4173
published_at 2026-06-12T12:55:00Z
2
value 0.00197
scoring_system epss
scoring_elements 0.41749
published_at 2026-06-13T12:55:00Z
3
value 0.00197
scoring_system epss
scoring_elements 0.41738
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0883
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=813559
reference_id 813559
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=813559
3
reference_url https://httpd.apache.org/security/json/CVE-2012-0883.json
reference_id CVE-2012-0883
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2012-0883.json
4
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
5
reference_url https://access.redhat.com/errata/RHSA-2012:1594
reference_id RHSA-2012:1594
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:1594
fixed_packages
0
url pkg:apache/httpd@2.2.23
purl pkg:apache/httpd@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-8vkp-k5yr-n3bn
5
vulnerability VCID-9nuk-vm33-kkha
6
vulnerability VCID-cm2b-nhrm-mfdr
7
vulnerability VCID-dj7a-88wd-dugh
8
vulnerability VCID-e4mk-ydp9-m3bx
9
vulnerability VCID-epgm-u9j7-7bd1
10
vulnerability VCID-grnf-r71w-r3h7
11
vulnerability VCID-kg8r-vq3s-2qa4
12
vulnerability VCID-nxqt-4e79-w3et
13
vulnerability VCID-p9db-n3kt-puhp
14
vulnerability VCID-rj9n-s2a4-w7he
15
vulnerability VCID-sfx1-4tej-gqgs
16
vulnerability VCID-uhmn-527n-fqgq
17
vulnerability VCID-uhyk-pc9e-w7cu
18
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.23
1
url pkg:apache/httpd@2.4.2
purl pkg:apache/httpd@2.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-2w8b-3gmt-qff7
2
vulnerability VCID-3dh3-8wr4-uqcd
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-43j2-q5rg-7qay
5
vulnerability VCID-6fav-yrx7-r7ar
6
vulnerability VCID-7j9j-sxt1-6qa6
7
vulnerability VCID-7x6x-s2w3-xygz
8
vulnerability VCID-7xcn-c8p4-j7ec
9
vulnerability VCID-8vkp-k5yr-n3bn
10
vulnerability VCID-9e8m-yzr3-pbgz
11
vulnerability VCID-9nuk-vm33-kkha
12
vulnerability VCID-9wx3-62cp-fuh8
13
vulnerability VCID-arm8-rmce-2bec
14
vulnerability VCID-bn5d-te6p-hyf1
15
vulnerability VCID-cbky-16wm-2fee
16
vulnerability VCID-cm2b-nhrm-mfdr
17
vulnerability VCID-dj7a-88wd-dugh
18
vulnerability VCID-dk12-s4wp-suhc
19
vulnerability VCID-dr2b-7ack-wbfp
20
vulnerability VCID-e4mk-ydp9-m3bx
21
vulnerability VCID-epgm-u9j7-7bd1
22
vulnerability VCID-f1cy-ycsy-qqhc
23
vulnerability VCID-grnf-r71w-r3h7
24
vulnerability VCID-h959-hrhy-wkep
25
vulnerability VCID-kg8r-vq3s-2qa4
26
vulnerability VCID-kp2b-t25c-sqfc
27
vulnerability VCID-n82t-1jhq-8ba3
28
vulnerability VCID-nxqt-4e79-w3et
29
vulnerability VCID-pc8m-gm5b-gya1
30
vulnerability VCID-r2fd-nfnk-h7gy
31
vulnerability VCID-rb9f-qwwr-v7c2
32
vulnerability VCID-rc99-4efu-tud2
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-t95h-sdy4-tua1
36
vulnerability VCID-tdub-a3cg-r7fg
37
vulnerability VCID-ubsc-7v3g-tkeb
38
vulnerability VCID-uhmn-527n-fqgq
39
vulnerability VCID-uhyk-pc9e-w7cu
40
vulnerability VCID-usz9-qezx-9ybx
41
vulnerability VCID-wf33-hszj-akf9
42
vulnerability VCID-xmt2-8ett-qbgx
43
vulnerability VCID-y5k7-ve1j-3bfc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.2
aliases CVE-2012-0883
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8qcw-mekw-buh6
15
url VCID-8vkp-k5yr-n3bn
vulnerability_id VCID-8vkp-k5yr-n3bn
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3183.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3183.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3183
reference_id
reference_type
scores
0
value 0.24118
scoring_system epss
scoring_elements 0.96192
published_at 2026-06-11T12:55:00Z
1
value 0.24118
scoring_system epss
scoring_elements 0.96203
published_at 2026-06-12T12:55:00Z
2
value 0.24118
scoring_system epss
scoring_elements 0.96205
published_at 2026-06-13T12:55:00Z
3
value 0.24118
scoring_system epss
scoring_elements 0.96208
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3183
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3183
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3183
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3185
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3185
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1243887
reference_id 1243887
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1243887
5
reference_url https://httpd.apache.org/security/json/CVE-2015-3183.json
reference_id CVE-2015-3183
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2015-3183.json
6
reference_url https://security.gentoo.org/glsa/201610-02
reference_id GLSA-201610-02
reference_type
scores
url https://security.gentoo.org/glsa/201610-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1666
reference_id RHSA-2015:1666
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1666
8
reference_url https://access.redhat.com/errata/RHSA-2015:1667
reference_id RHSA-2015:1667
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1667
9
reference_url https://access.redhat.com/errata/RHSA-2015:1668
reference_id RHSA-2015:1668
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1668
10
reference_url https://access.redhat.com/errata/RHSA-2015:2659
reference_id RHSA-2015:2659
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2659
11
reference_url https://access.redhat.com/errata/RHSA-2015:2660
reference_id RHSA-2015:2660
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2660
12
reference_url https://access.redhat.com/errata/RHSA-2015:2661
reference_id RHSA-2015:2661
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2661
13
reference_url https://access.redhat.com/errata/RHSA-2016:0061
reference_id RHSA-2016:0061
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0061
14
reference_url https://access.redhat.com/errata/RHSA-2016:0062
reference_id RHSA-2016:0062
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0062
15
reference_url https://access.redhat.com/errata/RHSA-2016:2054
reference_id RHSA-2016:2054
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2054
16
reference_url https://access.redhat.com/errata/RHSA-2016:2055
reference_id RHSA-2016:2055
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2055
17
reference_url https://access.redhat.com/errata/RHSA-2016:2056
reference_id RHSA-2016:2056
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2056
18
reference_url https://usn.ubuntu.com/2686-1/
reference_id USN-2686-1
reference_type
scores
url https://usn.ubuntu.com/2686-1/
fixed_packages
0
url pkg:apache/httpd@2.2.31
purl pkg:apache/httpd@2.2.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7j9j-sxt1-6qa6
1
vulnerability VCID-e4mk-ydp9-m3bx
2
vulnerability VCID-epgm-u9j7-7bd1
3
vulnerability VCID-grnf-r71w-r3h7
4
vulnerability VCID-kg8r-vq3s-2qa4
5
vulnerability VCID-nxqt-4e79-w3et
6
vulnerability VCID-sfx1-4tej-gqgs
7
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.31
1
url pkg:apache/httpd@2.4.16
purl pkg:apache/httpd@2.4.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-43j2-q5rg-7qay
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-7xcn-c8p4-j7ec
5
vulnerability VCID-9e8m-yzr3-pbgz
6
vulnerability VCID-9wx3-62cp-fuh8
7
vulnerability VCID-arm8-rmce-2bec
8
vulnerability VCID-bn5d-te6p-hyf1
9
vulnerability VCID-dk12-s4wp-suhc
10
vulnerability VCID-e4mk-ydp9-m3bx
11
vulnerability VCID-epgm-u9j7-7bd1
12
vulnerability VCID-f1cy-ycsy-qqhc
13
vulnerability VCID-grnf-r71w-r3h7
14
vulnerability VCID-h959-hrhy-wkep
15
vulnerability VCID-kg8r-vq3s-2qa4
16
vulnerability VCID-kp2b-t25c-sqfc
17
vulnerability VCID-n8qk-qws2-9ydv
18
vulnerability VCID-nxqt-4e79-w3et
19
vulnerability VCID-rb9f-qwwr-v7c2
20
vulnerability VCID-rc99-4efu-tud2
21
vulnerability VCID-sfx1-4tej-gqgs
22
vulnerability VCID-t95h-sdy4-tua1
23
vulnerability VCID-tdub-a3cg-r7fg
24
vulnerability VCID-uhyk-pc9e-w7cu
25
vulnerability VCID-usz9-qezx-9ybx
26
vulnerability VCID-wf33-hszj-akf9
27
vulnerability VCID-y5k7-ve1j-3bfc
28
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.16
aliases CVE-2015-3183
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8vkp-k5yr-n3bn
16
url VCID-8zzs-cvkw-nubr
vulnerability_id VCID-8zzs-cvkw-nubr
summary An off-by-one overflow flaw was found in the way the bundled copy of the APR-util library processed a variable list of arguments. An attacker could provide a specially-crafted string as input for the formatted output conversion routine, which could, on big-endian platforms, potentially lead to the disclosure of sensitive information or a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-1956
reference_id
reference_type
scores
0
value 0.05415
scoring_system epss
scoring_elements 0.90353
published_at 2026-06-11T12:55:00Z
1
value 0.05415
scoring_system epss
scoring_elements 0.90383
published_at 2026-06-12T12:55:00Z
2
value 0.05415
scoring_system epss
scoring_elements 0.90391
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-1956
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=504390
reference_id 504390
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=504390
4
reference_url https://httpd.apache.org/security/json/CVE-2009-1956.json
reference_id CVE-2009-1956
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-1956.json
5
reference_url https://security.gentoo.org/glsa/200907-03
reference_id GLSA-200907-03
reference_type
scores
url https://security.gentoo.org/glsa/200907-03
6
reference_url https://access.redhat.com/errata/RHSA-2009:1107
reference_id RHSA-2009:1107
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1107
7
reference_url https://access.redhat.com/errata/RHSA-2009:1108
reference_id RHSA-2009:1108
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1108
8
reference_url https://usn.ubuntu.com/786-1/
reference_id USN-786-1
reference_type
scores
url https://usn.ubuntu.com/786-1/
9
reference_url https://usn.ubuntu.com/787-1/
reference_id USN-787-1
reference_type
scores
url https://usn.ubuntu.com/787-1/
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2009-1956
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8zzs-cvkw-nubr
17
url VCID-9nuk-vm33-kkha
vulnerability_id VCID-9nuk-vm33-kkha
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0231.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0231.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0231
reference_id
reference_type
scores
0
value 0.44151
scoring_system epss
scoring_elements 0.97629
published_at 2026-06-11T12:55:00Z
1
value 0.44151
scoring_system epss
scoring_elements 0.97638
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0231
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1120596
reference_id 1120596
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1120596
6
reference_url https://httpd.apache.org/security/json/CVE-2014-0231.json
reference_id CVE-2014-0231
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2014-0231.json
7
reference_url https://security.gentoo.org/glsa/201504-03
reference_id GLSA-201504-03
reference_type
scores
url https://security.gentoo.org/glsa/201504-03
8
reference_url https://access.redhat.com/errata/RHSA-2014:0920
reference_id RHSA-2014:0920
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0920
9
reference_url https://access.redhat.com/errata/RHSA-2014:0921
reference_id RHSA-2014:0921
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0921
10
reference_url https://access.redhat.com/errata/RHSA-2014:0922
reference_id RHSA-2014:0922
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0922
11
reference_url https://access.redhat.com/errata/RHSA-2014:1019
reference_id RHSA-2014:1019
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1019
12
reference_url https://access.redhat.com/errata/RHSA-2014:1020
reference_id RHSA-2014:1020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1020
13
reference_url https://access.redhat.com/errata/RHSA-2014:1021
reference_id RHSA-2014:1021
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1021
14
reference_url https://access.redhat.com/errata/RHSA-2014:1086
reference_id RHSA-2014:1086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1086
15
reference_url https://access.redhat.com/errata/RHSA-2014:1087
reference_id RHSA-2014:1087
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1087
16
reference_url https://access.redhat.com/errata/RHSA-2014:1088
reference_id RHSA-2014:1088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1088
17
reference_url https://usn.ubuntu.com/2299-1/
reference_id USN-2299-1
reference_type
scores
url https://usn.ubuntu.com/2299-1/
fixed_packages
0
url pkg:apache/httpd@2.2.29
purl pkg:apache/httpd@2.2.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7j9j-sxt1-6qa6
1
vulnerability VCID-8vkp-k5yr-n3bn
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-epgm-u9j7-7bd1
4
vulnerability VCID-grnf-r71w-r3h7
5
vulnerability VCID-kg8r-vq3s-2qa4
6
vulnerability VCID-nxqt-4e79-w3et
7
vulnerability VCID-sfx1-4tej-gqgs
8
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.29
1
url pkg:apache/httpd@2.4.10
purl pkg:apache/httpd@2.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9wx3-62cp-fuh8
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-bn5d-te6p-hyf1
11
vulnerability VCID-dk12-s4wp-suhc
12
vulnerability VCID-dr2b-7ack-wbfp
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-epgm-u9j7-7bd1
15
vulnerability VCID-f1cy-ycsy-qqhc
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-kp2b-t25c-sqfc
20
vulnerability VCID-n82t-1jhq-8ba3
21
vulnerability VCID-n8qk-qws2-9ydv
22
vulnerability VCID-nxqt-4e79-w3et
23
vulnerability VCID-pc8m-gm5b-gya1
24
vulnerability VCID-qjxt-ekff-ykgk
25
vulnerability VCID-rb9f-qwwr-v7c2
26
vulnerability VCID-rc99-4efu-tud2
27
vulnerability VCID-sfx1-4tej-gqgs
28
vulnerability VCID-t95h-sdy4-tua1
29
vulnerability VCID-tdub-a3cg-r7fg
30
vulnerability VCID-uhyk-pc9e-w7cu
31
vulnerability VCID-usz9-qezx-9ybx
32
vulnerability VCID-uyz2-jck5-d7dd
33
vulnerability VCID-wf33-hszj-akf9
34
vulnerability VCID-y5k7-ve1j-3bfc
35
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.10
aliases CVE-2014-0231
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9nuk-vm33-kkha
18
url VCID-9qsz-zr6r-z3c3
vulnerability_id VCID-9qsz-zr6r-z3c3
summary A flaw was found in the mod_proxy_balancer module. On sites where mod_proxy_balancer is enabled, an authorized user could send a carefully crafted request that would cause the Apache child process handling that request to crash. This could lead to a denial of service if using a threaded Multi-Processing Module.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6422.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6422.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-6422
reference_id
reference_type
scores
0
value 0.05621
scoring_system epss
scoring_elements 0.90542
published_at 2026-06-11T12:55:00Z
1
value 0.05621
scoring_system epss
scoring_elements 0.90573
published_at 2026-06-12T12:55:00Z
2
value 0.05621
scoring_system epss
scoring_elements 0.9058
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-6422
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6422
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6422
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=427230
reference_id 427230
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=427230
4
reference_url https://httpd.apache.org/security/json/CVE-2007-6422.json
reference_id CVE-2007-6422
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-6422.json
5
reference_url https://security.gentoo.org/glsa/200803-19
reference_id GLSA-200803-19
reference_type
scores
url https://security.gentoo.org/glsa/200803-19
6
reference_url https://access.redhat.com/errata/RHSA-2008:0008
reference_id RHSA-2008:0008
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0008
7
reference_url https://usn.ubuntu.com/575-1/
reference_id USN-575-1
reference_type
scores
url https://usn.ubuntu.com/575-1/
fixed_packages
0
url pkg:apache/httpd@2.2.8
purl pkg:apache/httpd@2.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-awb7-8p6u-2fa3
18
vulnerability VCID-bg3g-yc4h-3bdu
19
vulnerability VCID-cbcf-d64d-8bd2
20
vulnerability VCID-cm2b-nhrm-mfdr
21
vulnerability VCID-dj7a-88wd-dugh
22
vulnerability VCID-dkh9-b39c-uqgz
23
vulnerability VCID-dr6d-j9as-qfby
24
vulnerability VCID-e4mk-ydp9-m3bx
25
vulnerability VCID-ehc1-xda2-8bb3
26
vulnerability VCID-epgm-u9j7-7bd1
27
vulnerability VCID-fsva-ef97-87hs
28
vulnerability VCID-fwbt-3uqc-sqf7
29
vulnerability VCID-grnf-r71w-r3h7
30
vulnerability VCID-h6qp-sn1h-byap
31
vulnerability VCID-hv8d-3r75-abfb
32
vulnerability VCID-kg8r-vq3s-2qa4
33
vulnerability VCID-m7y1-9mdy-6bfx
34
vulnerability VCID-ne55-gstx-1qfu
35
vulnerability VCID-nxqt-4e79-w3et
36
vulnerability VCID-p9db-n3kt-puhp
37
vulnerability VCID-rj9n-s2a4-w7he
38
vulnerability VCID-sfx1-4tej-gqgs
39
vulnerability VCID-szmq-1zrf-mfa6
40
vulnerability VCID-uhmn-527n-fqgq
41
vulnerability VCID-uhyk-pc9e-w7cu
42
vulnerability VCID-ukk2-3cpg-7ugy
43
vulnerability VCID-vu91-nh94-nkb2
44
vulnerability VCID-vy92-b4as-a7hp
45
vulnerability VCID-w4b1-tu6b-mkc7
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.8
aliases CVE-2007-6422
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9qsz-zr6r-z3c3
19
url VCID-awb7-8p6u-2fa3
vulnerability_id VCID-awb7-8p6u-2fa3
summary A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3560.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3560.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3560
reference_id
reference_type
scores
0
value 0.03008
scoring_system epss
scoring_elements 0.86882
published_at 2026-06-11T12:55:00Z
1
value 0.03008
scoring_system epss
scoring_elements 0.86929
published_at 2026-06-12T12:55:00Z
2
value 0.03008
scoring_system epss
scoring_elements 0.86939
published_at 2026-06-13T12:55:00Z
3
value 0.03008
scoring_system epss
scoring_elements 0.86936
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3560
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=533174
reference_id 533174
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=533174
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560901
reference_id 560901
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560901
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560919
reference_id 560919
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560919
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560920
reference_id 560920
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560920
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560921
reference_id 560921
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560921
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560922
reference_id 560922
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560922
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560926
reference_id 560926
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560926
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560927
reference_id 560927
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560927
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560928
reference_id 560928
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560928
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560929
reference_id 560929
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560929
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560930
reference_id 560930
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560930
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560935
reference_id 560935
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560935
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560936
reference_id 560936
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560936
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560937
reference_id 560937
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560937
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560940
reference_id 560940
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560940
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560942
reference_id 560942
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560942
19
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601053
reference_id 601053
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601053
20
reference_url https://httpd.apache.org/security/json/CVE-2009-3560.json
reference_id CVE-2009-3560
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-3560.json
21
reference_url https://security.gentoo.org/glsa/201209-06
reference_id GLSA-201209-06
reference_type
scores
url https://security.gentoo.org/glsa/201209-06
22
reference_url https://access.redhat.com/errata/RHSA-2009:1625
reference_id RHSA-2009:1625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1625
23
reference_url https://access.redhat.com/errata/RHSA-2017:3239
reference_id RHSA-2017:3239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3239
24
reference_url https://usn.ubuntu.com/890-1/
reference_id USN-890-1
reference_type
scores
url https://usn.ubuntu.com/890-1/
25
reference_url https://usn.ubuntu.com/890-2/
reference_id USN-890-2
reference_type
scores
url https://usn.ubuntu.com/890-2/
26
reference_url https://usn.ubuntu.com/890-3/
reference_id USN-890-3
reference_type
scores
url https://usn.ubuntu.com/890-3/
27
reference_url https://usn.ubuntu.com/890-4/
reference_id USN-890-4
reference_type
scores
url https://usn.ubuntu.com/890-4/
28
reference_url https://usn.ubuntu.com/890-5/
reference_id USN-890-5
reference_type
scores
url https://usn.ubuntu.com/890-5/
29
reference_url https://usn.ubuntu.com/890-6/
reference_id USN-890-6
reference_type
scores
url https://usn.ubuntu.com/890-6/
fixed_packages
0
url pkg:apache/httpd@2.2.17
purl pkg:apache/httpd@2.2.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-5384-9rhf-5yby
3
vulnerability VCID-6bsk-g6yj-2khy
4
vulnerability VCID-6fav-yrx7-r7ar
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7x6x-s2w3-xygz
7
vulnerability VCID-8qcw-mekw-buh6
8
vulnerability VCID-8vkp-k5yr-n3bn
9
vulnerability VCID-9nuk-vm33-kkha
10
vulnerability VCID-bg3g-yc4h-3bdu
11
vulnerability VCID-cm2b-nhrm-mfdr
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-dr6d-j9as-qfby
14
vulnerability VCID-e4mk-ydp9-m3bx
15
vulnerability VCID-epgm-u9j7-7bd1
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h6qp-sn1h-byap
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-m4ps-cv5v-n7fr
20
vulnerability VCID-ne55-gstx-1qfu
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-p9db-n3kt-puhp
23
vulnerability VCID-rj9n-s2a4-w7he
24
vulnerability VCID-rxv4-mugn-akhf
25
vulnerability VCID-sfx1-4tej-gqgs
26
vulnerability VCID-szmq-1zrf-mfa6
27
vulnerability VCID-uhmn-527n-fqgq
28
vulnerability VCID-uhyk-pc9e-w7cu
29
vulnerability VCID-xmt2-8ett-qbgx
30
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.17
aliases CVE-2009-3560
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-awb7-8p6u-2fa3
20
url VCID-bame-16es-e7a2
vulnerability_id VCID-bame-16es-e7a2
summary A workaround was added in the mod_proxy_ftp module. On sites where mod_proxy_ftp is enabled and a forward proxy is configured, a cross-site scripting attack is possible against Web browsers which do not correctly derive the response character set following the rules in RFC 2616.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0005.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-0005.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-0005
reference_id
reference_type
scores
0
value 0.02726
scoring_system epss
scoring_elements 0.86268
published_at 2026-06-11T12:55:00Z
1
value 0.02726
scoring_system epss
scoring_elements 0.86319
published_at 2026-06-12T12:55:00Z
2
value 0.02726
scoring_system epss
scoring_elements 0.86329
published_at 2026-06-13T12:55:00Z
3
value 0.02726
scoring_system epss
scoring_elements 0.86327
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-0005
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0005
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=427739
reference_id 427739
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=427739
4
reference_url https://httpd.apache.org/security/json/CVE-2008-0005.json
reference_id CVE-2008-0005
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2008-0005.json
5
reference_url https://security.gentoo.org/glsa/200803-19
reference_id GLSA-200803-19
reference_type
scores
url https://security.gentoo.org/glsa/200803-19
6
reference_url https://access.redhat.com/errata/RHSA-2008:0004
reference_id RHSA-2008:0004
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0004
7
reference_url https://access.redhat.com/errata/RHSA-2008:0005
reference_id RHSA-2008:0005
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0005
8
reference_url https://access.redhat.com/errata/RHSA-2008:0006
reference_id RHSA-2008:0006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0006
9
reference_url https://access.redhat.com/errata/RHSA-2008:0007
reference_id RHSA-2008:0007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0007
10
reference_url https://access.redhat.com/errata/RHSA-2008:0008
reference_id RHSA-2008:0008
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0008
11
reference_url https://usn.ubuntu.com/575-1/
reference_id USN-575-1
reference_type
scores
url https://usn.ubuntu.com/575-1/
fixed_packages
0
url pkg:apache/httpd@2.2.8
purl pkg:apache/httpd@2.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-awb7-8p6u-2fa3
18
vulnerability VCID-bg3g-yc4h-3bdu
19
vulnerability VCID-cbcf-d64d-8bd2
20
vulnerability VCID-cm2b-nhrm-mfdr
21
vulnerability VCID-dj7a-88wd-dugh
22
vulnerability VCID-dkh9-b39c-uqgz
23
vulnerability VCID-dr6d-j9as-qfby
24
vulnerability VCID-e4mk-ydp9-m3bx
25
vulnerability VCID-ehc1-xda2-8bb3
26
vulnerability VCID-epgm-u9j7-7bd1
27
vulnerability VCID-fsva-ef97-87hs
28
vulnerability VCID-fwbt-3uqc-sqf7
29
vulnerability VCID-grnf-r71w-r3h7
30
vulnerability VCID-h6qp-sn1h-byap
31
vulnerability VCID-hv8d-3r75-abfb
32
vulnerability VCID-kg8r-vq3s-2qa4
33
vulnerability VCID-m7y1-9mdy-6bfx
34
vulnerability VCID-ne55-gstx-1qfu
35
vulnerability VCID-nxqt-4e79-w3et
36
vulnerability VCID-p9db-n3kt-puhp
37
vulnerability VCID-rj9n-s2a4-w7he
38
vulnerability VCID-sfx1-4tej-gqgs
39
vulnerability VCID-szmq-1zrf-mfa6
40
vulnerability VCID-uhmn-527n-fqgq
41
vulnerability VCID-uhyk-pc9e-w7cu
42
vulnerability VCID-ukk2-3cpg-7ugy
43
vulnerability VCID-vu91-nh94-nkb2
44
vulnerability VCID-vy92-b4as-a7hp
45
vulnerability VCID-w4b1-tu6b-mkc7
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.8
aliases CVE-2008-0005
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bame-16es-e7a2
21
url VCID-bg3g-yc4h-3bdu
vulnerability_id VCID-bg3g-yc4h-3bdu
summary A flaw was found in the default error response for status code 400. This flaw could be used by an attacker to expose "httpOnly" cookies when no custom ErrorDocument is specified.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0053.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0053.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0053
reference_id
reference_type
scores
0
value 0.23641
scoring_system epss
scoring_elements 0.96111
published_at 2026-06-11T12:55:00Z
1
value 0.23641
scoring_system epss
scoring_elements 0.96122
published_at 2026-06-12T12:55:00Z
2
value 0.23641
scoring_system epss
scoring_elements 0.96124
published_at 2026-06-13T12:55:00Z
3
value 0.23641
scoring_system epss
scoring_elements 0.96126
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0053
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=785069
reference_id 785069
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=785069
4
reference_url https://httpd.apache.org/security/json/CVE-2012-0053.json
reference_id CVE-2012-0053
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2012-0053.json
5
reference_url https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08
reference_id CVE-2012-0053;OSVDB-78556
reference_type exploit
scores
url https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18442.html
reference_id CVE-2012-0053;OSVDB-78556
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18442.html
7
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
8
reference_url https://access.redhat.com/errata/RHSA-2012:0128
reference_id RHSA-2012:0128
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0128
9
reference_url https://access.redhat.com/errata/RHSA-2012:0323
reference_id RHSA-2012:0323
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0323
10
reference_url https://access.redhat.com/errata/RHSA-2012:0542
reference_id RHSA-2012:0542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0542
11
reference_url https://access.redhat.com/errata/RHSA-2012:0543
reference_id RHSA-2012:0543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0543
12
reference_url https://usn.ubuntu.com/1368-1/
reference_id USN-1368-1
reference_type
scores
url https://usn.ubuntu.com/1368-1/
fixed_packages
0
url pkg:apache/httpd@2.2.22
purl pkg:apache/httpd@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-7x6x-s2w3-xygz
5
vulnerability VCID-8qcw-mekw-buh6
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9nuk-vm33-kkha
8
vulnerability VCID-cm2b-nhrm-mfdr
9
vulnerability VCID-dj7a-88wd-dugh
10
vulnerability VCID-e4mk-ydp9-m3bx
11
vulnerability VCID-epgm-u9j7-7bd1
12
vulnerability VCID-grnf-r71w-r3h7
13
vulnerability VCID-kg8r-vq3s-2qa4
14
vulnerability VCID-nxqt-4e79-w3et
15
vulnerability VCID-p9db-n3kt-puhp
16
vulnerability VCID-rj9n-s2a4-w7he
17
vulnerability VCID-sfx1-4tej-gqgs
18
vulnerability VCID-uhmn-527n-fqgq
19
vulnerability VCID-uhyk-pc9e-w7cu
20
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.22
aliases CVE-2012-0053
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bg3g-yc4h-3bdu
22
url VCID-cbcf-d64d-8bd2
vulnerability_id VCID-cbcf-d64d-8bd2
summary Faulty error handling was found affecting Solaris pollset support (Event Port backend) caused by a bug in APR. A remote attacker could trigger this issue on Solaris servers which used prefork or event MPMs, resulting in a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2699.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2699.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2699
reference_id
reference_type
scores
0
value 0.09281
scoring_system epss
scoring_elements 0.92919
published_at 2026-06-11T12:55:00Z
1
value 0.09281
scoring_system epss
scoring_elements 0.92943
published_at 2026-06-12T12:55:00Z
2
value 0.09281
scoring_system epss
scoring_elements 0.92945
published_at 2026-06-13T12:55:00Z
3
value 0.09281
scoring_system epss
scoring_elements 0.92946
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2699
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=528756
reference_id 528756
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=528756
3
reference_url https://httpd.apache.org/security/json/CVE-2009-2699.json
reference_id CVE-2009-2699
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-2699.json
fixed_packages
0
url pkg:apache/httpd@2.2.14
purl pkg:apache/httpd@2.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cm2b-nhrm-mfdr
18
vulnerability VCID-dj7a-88wd-dugh
19
vulnerability VCID-dr6d-j9as-qfby
20
vulnerability VCID-e4mk-ydp9-m3bx
21
vulnerability VCID-epgm-u9j7-7bd1
22
vulnerability VCID-grnf-r71w-r3h7
23
vulnerability VCID-h6qp-sn1h-byap
24
vulnerability VCID-kg8r-vq3s-2qa4
25
vulnerability VCID-m4ps-cv5v-n7fr
26
vulnerability VCID-ne55-gstx-1qfu
27
vulnerability VCID-nxqt-4e79-w3et
28
vulnerability VCID-p9db-n3kt-puhp
29
vulnerability VCID-rj9n-s2a4-w7he
30
vulnerability VCID-sfx1-4tej-gqgs
31
vulnerability VCID-szmq-1zrf-mfa6
32
vulnerability VCID-uhmn-527n-fqgq
33
vulnerability VCID-uhyk-pc9e-w7cu
34
vulnerability VCID-vy92-b4as-a7hp
35
vulnerability VCID-xmt2-8ett-qbgx
36
vulnerability VCID-xn4w-pvu5-dyhb
37
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.14
aliases CVE-2009-2699
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cbcf-d64d-8bd2
23
url VCID-cm2b-nhrm-mfdr
vulnerability_id VCID-cm2b-nhrm-mfdr
summary Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML) pointing to a URI that is not configured for DAV will trigger a segfault.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1896.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1896.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1896
reference_id
reference_type
scores
0
value 0.43961
scoring_system epss
scoring_elements 0.9762
published_at 2026-06-11T12:55:00Z
1
value 0.43961
scoring_system epss
scoring_elements 0.97628
published_at 2026-06-13T12:55:00Z
2
value 0.43961
scoring_system epss
scoring_elements 0.97629
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1896
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717272
reference_id 717272
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717272
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=983549
reference_id 983549
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=983549
5
reference_url https://httpd.apache.org/security/json/CVE-2013-1896.json
reference_id CVE-2013-1896
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2013-1896.json
6
reference_url https://security.gentoo.org/glsa/201309-12
reference_id GLSA-201309-12
reference_type
scores
url https://security.gentoo.org/glsa/201309-12
7
reference_url https://access.redhat.com/errata/RHSA-2013:1133
reference_id RHSA-2013:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1133
8
reference_url https://access.redhat.com/errata/RHSA-2013:1134
reference_id RHSA-2013:1134
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1134
9
reference_url https://access.redhat.com/errata/RHSA-2013:1156
reference_id RHSA-2013:1156
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1156
10
reference_url https://access.redhat.com/errata/RHSA-2013:1207
reference_id RHSA-2013:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1207
11
reference_url https://access.redhat.com/errata/RHSA-2013:1208
reference_id RHSA-2013:1208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1208
12
reference_url https://access.redhat.com/errata/RHSA-2013:1209
reference_id RHSA-2013:1209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1209
13
reference_url https://usn.ubuntu.com/1903-1/
reference_id USN-1903-1
reference_type
scores
url https://usn.ubuntu.com/1903-1/
fixed_packages
0
url pkg:apache/httpd@2.2.25
purl pkg:apache/httpd@2.2.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u4s-a96g-v3aq
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-8vkp-k5yr-n3bn
3
vulnerability VCID-9nuk-vm33-kkha
4
vulnerability VCID-dj7a-88wd-dugh
5
vulnerability VCID-e4mk-ydp9-m3bx
6
vulnerability VCID-epgm-u9j7-7bd1
7
vulnerability VCID-grnf-r71w-r3h7
8
vulnerability VCID-kg8r-vq3s-2qa4
9
vulnerability VCID-nxqt-4e79-w3et
10
vulnerability VCID-rj9n-s2a4-w7he
11
vulnerability VCID-sfx1-4tej-gqgs
12
vulnerability VCID-uhmn-527n-fqgq
13
vulnerability VCID-uhyk-pc9e-w7cu
14
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.25
1
url pkg:apache/httpd@2.4.6
purl pkg:apache/httpd@2.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9nuk-vm33-kkha
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-arm8-rmce-2bec
11
vulnerability VCID-bn5d-te6p-hyf1
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-dk12-s4wp-suhc
14
vulnerability VCID-dr2b-7ack-wbfp
15
vulnerability VCID-e4mk-ydp9-m3bx
16
vulnerability VCID-epgm-u9j7-7bd1
17
vulnerability VCID-f1cy-ycsy-qqhc
18
vulnerability VCID-grnf-r71w-r3h7
19
vulnerability VCID-gs9y-327e-s7d3
20
vulnerability VCID-h959-hrhy-wkep
21
vulnerability VCID-kg8r-vq3s-2qa4
22
vulnerability VCID-kp2b-t25c-sqfc
23
vulnerability VCID-n82t-1jhq-8ba3
24
vulnerability VCID-n8qk-qws2-9ydv
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-pc8m-gm5b-gya1
27
vulnerability VCID-r2fd-nfnk-h7gy
28
vulnerability VCID-rb9f-qwwr-v7c2
29
vulnerability VCID-rc99-4efu-tud2
30
vulnerability VCID-rj9n-s2a4-w7he
31
vulnerability VCID-sfx1-4tej-gqgs
32
vulnerability VCID-t95h-sdy4-tua1
33
vulnerability VCID-tdub-a3cg-r7fg
34
vulnerability VCID-udh1-mvzf-9uhv
35
vulnerability VCID-uhmn-527n-fqgq
36
vulnerability VCID-uhyk-pc9e-w7cu
37
vulnerability VCID-usz9-qezx-9ybx
38
vulnerability VCID-wf33-hszj-akf9
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-y5k7-ve1j-3bfc
41
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.6
aliases CVE-2013-1896
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cm2b-nhrm-mfdr
24
url VCID-dj7a-88wd-dugh
vulnerability_id VCID-dj7a-88wd-dugh
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0226.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0226.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0226
reference_id
reference_type
scores
0
value 0.75444
scoring_system epss
scoring_elements 0.98911
published_at 2026-06-11T12:55:00Z
1
value 0.75444
scoring_system epss
scoring_elements 0.98915
published_at 2026-06-12T12:55:00Z
2
value 0.75444
scoring_system epss
scoring_elements 0.98917
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0226
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1120603
reference_id 1120603
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1120603
6
reference_url https://httpd.apache.org/security/json/CVE-2014-0226.json
reference_id CVE-2014-0226
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2014-0226.json
7
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/34133.txt
reference_id CVE-2014-0226;OSVDB-109216
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/34133.txt
8
reference_url https://security.gentoo.org/glsa/201408-12
reference_id GLSA-201408-12
reference_type
scores
url https://security.gentoo.org/glsa/201408-12
9
reference_url https://security.gentoo.org/glsa/201504-03
reference_id GLSA-201504-03
reference_type
scores
url https://security.gentoo.org/glsa/201504-03
10
reference_url https://access.redhat.com/errata/RHSA-2014:0920
reference_id RHSA-2014:0920
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0920
11
reference_url https://access.redhat.com/errata/RHSA-2014:0921
reference_id RHSA-2014:0921
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0921
12
reference_url https://access.redhat.com/errata/RHSA-2014:0922
reference_id RHSA-2014:0922
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0922
13
reference_url https://access.redhat.com/errata/RHSA-2014:1019
reference_id RHSA-2014:1019
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1019
14
reference_url https://access.redhat.com/errata/RHSA-2014:1020
reference_id RHSA-2014:1020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1020
15
reference_url https://access.redhat.com/errata/RHSA-2014:1021
reference_id RHSA-2014:1021
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1021
16
reference_url https://access.redhat.com/errata/RHSA-2014:1086
reference_id RHSA-2014:1086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1086
17
reference_url https://access.redhat.com/errata/RHSA-2014:1087
reference_id RHSA-2014:1087
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1087
18
reference_url https://access.redhat.com/errata/RHSA-2014:1088
reference_id RHSA-2014:1088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1088
19
reference_url https://usn.ubuntu.com/2299-1/
reference_id USN-2299-1
reference_type
scores
url https://usn.ubuntu.com/2299-1/
fixed_packages
0
url pkg:apache/httpd@2.2.29
purl pkg:apache/httpd@2.2.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7j9j-sxt1-6qa6
1
vulnerability VCID-8vkp-k5yr-n3bn
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-epgm-u9j7-7bd1
4
vulnerability VCID-grnf-r71w-r3h7
5
vulnerability VCID-kg8r-vq3s-2qa4
6
vulnerability VCID-nxqt-4e79-w3et
7
vulnerability VCID-sfx1-4tej-gqgs
8
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.29
1
url pkg:apache/httpd@2.4.10
purl pkg:apache/httpd@2.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9wx3-62cp-fuh8
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-bn5d-te6p-hyf1
11
vulnerability VCID-dk12-s4wp-suhc
12
vulnerability VCID-dr2b-7ack-wbfp
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-epgm-u9j7-7bd1
15
vulnerability VCID-f1cy-ycsy-qqhc
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-kp2b-t25c-sqfc
20
vulnerability VCID-n82t-1jhq-8ba3
21
vulnerability VCID-n8qk-qws2-9ydv
22
vulnerability VCID-nxqt-4e79-w3et
23
vulnerability VCID-pc8m-gm5b-gya1
24
vulnerability VCID-qjxt-ekff-ykgk
25
vulnerability VCID-rb9f-qwwr-v7c2
26
vulnerability VCID-rc99-4efu-tud2
27
vulnerability VCID-sfx1-4tej-gqgs
28
vulnerability VCID-t95h-sdy4-tua1
29
vulnerability VCID-tdub-a3cg-r7fg
30
vulnerability VCID-uhyk-pc9e-w7cu
31
vulnerability VCID-usz9-qezx-9ybx
32
vulnerability VCID-uyz2-jck5-d7dd
33
vulnerability VCID-wf33-hszj-akf9
34
vulnerability VCID-y5k7-ve1j-3bfc
35
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.10
aliases CVE-2014-0226
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dj7a-88wd-dugh
25
url VCID-dkh9-b39c-uqgz
vulnerability_id VCID-dkh9-b39c-uqgz
summary A flaw in apr_palloc() in the bundled copy of APR could cause heap overflows in programs that try to apr_palloc() a user controlled size. The Apache HTTP Server itself does not pass unsanitized user-provided sizes to this function, so it could only be triggered through some other application which uses apr_palloc() in a vulnerable way.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2412.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2412.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2412
reference_id
reference_type
scores
0
value 0.10322
scoring_system epss
scoring_elements 0.9335
published_at 2026-06-11T12:55:00Z
1
value 0.10322
scoring_system epss
scoring_elements 0.93372
published_at 2026-06-12T12:55:00Z
2
value 0.10322
scoring_system epss
scoring_elements 0.93375
published_at 2026-06-13T12:55:00Z
3
value 0.10322
scoring_system epss
scoring_elements 0.93377
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2412
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=515698
reference_id 515698
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=515698
4
reference_url https://httpd.apache.org/security/json/CVE-2009-2412.json
reference_id CVE-2009-2412
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-2412.json
5
reference_url https://security.gentoo.org/glsa/200909-03
reference_id GLSA-200909-03
reference_type
scores
url https://security.gentoo.org/glsa/200909-03
6
reference_url https://access.redhat.com/errata/RHSA-2009:1204
reference_id RHSA-2009:1204
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1204
7
reference_url https://access.redhat.com/errata/RHSA-2009:1205
reference_id RHSA-2009:1205
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1205
8
reference_url https://access.redhat.com/errata/RHSA-2009:1462
reference_id RHSA-2009:1462
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1462
9
reference_url https://usn.ubuntu.com/813-1/
reference_id USN-813-1
reference_type
scores
url https://usn.ubuntu.com/813-1/
10
reference_url https://usn.ubuntu.com/813-2/
reference_id USN-813-2
reference_type
scores
url https://usn.ubuntu.com/813-2/
11
reference_url https://usn.ubuntu.com/813-3/
reference_id USN-813-3
reference_type
scores
url https://usn.ubuntu.com/813-3/
fixed_packages
0
url pkg:apache/httpd@2.2.13
purl pkg:apache/httpd@2.2.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dr6d-j9as-qfby
21
vulnerability VCID-e4mk-ydp9-m3bx
22
vulnerability VCID-ehc1-xda2-8bb3
23
vulnerability VCID-epgm-u9j7-7bd1
24
vulnerability VCID-fwbt-3uqc-sqf7
25
vulnerability VCID-grnf-r71w-r3h7
26
vulnerability VCID-h6qp-sn1h-byap
27
vulnerability VCID-kg8r-vq3s-2qa4
28
vulnerability VCID-m4ps-cv5v-n7fr
29
vulnerability VCID-ne55-gstx-1qfu
30
vulnerability VCID-nxqt-4e79-w3et
31
vulnerability VCID-p9db-n3kt-puhp
32
vulnerability VCID-rj9n-s2a4-w7he
33
vulnerability VCID-sfx1-4tej-gqgs
34
vulnerability VCID-szmq-1zrf-mfa6
35
vulnerability VCID-uhmn-527n-fqgq
36
vulnerability VCID-uhyk-pc9e-w7cu
37
vulnerability VCID-vy92-b4as-a7hp
38
vulnerability VCID-xmt2-8ett-qbgx
39
vulnerability VCID-xn4w-pvu5-dyhb
40
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.13
aliases CVE-2009-2412
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dkh9-b39c-uqgz
26
url VCID-dr6d-j9as-qfby
vulnerability_id VCID-dr6d-j9as-qfby
summary 
A flaw was found in the apr_fnmatch() function of the bundled APR library. Where mod_autoindex is enabled, and a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack.
Workaround: Setting the 'IgnoreClient' option to the 'IndexOptions' directive disables processing of the client-supplied request query arguments, preventing this attack.
Resolution: Update APR to release 1.4.5 (bundled with httpd 2.2.19) or release 0.9.20 (bundled with httpd 2.0.65)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0419.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0419.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-0419
reference_id
reference_type
scores
0
value 0.48782
scoring_system epss
scoring_elements 0.97825
published_at 2026-06-11T12:55:00Z
1
value 0.48782
scoring_system epss
scoring_elements 0.97835
published_at 2026-06-12T12:55:00Z
2
value 0.52868
scoring_system epss
scoring_elements 0.98016
published_at 2026-06-13T12:55:00Z
3
value 0.52868
scoring_system epss
scoring_elements 0.98017
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-0419
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=703390
reference_id 703390
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=703390
4
reference_url https://httpd.apache.org/security/json/CVE-2011-0419.json
reference_id CVE-2011-0419
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2011-0419.json
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/35738.php
reference_id CVE-2011-0419;OSVDB-73383
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/35738.php
6
reference_url https://www.securityfocus.com/bid/47820/info
reference_id CVE-2011-0419;OSVDB-73383
reference_type exploit
scores
url https://www.securityfocus.com/bid/47820/info
7
reference_url https://security.gentoo.org/glsa/201405-24
reference_id GLSA-201405-24
reference_type
scores
url https://security.gentoo.org/glsa/201405-24
8
reference_url https://access.redhat.com/errata/RHSA-2011:0507
reference_id RHSA-2011:0507
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0507
9
reference_url https://usn.ubuntu.com/1134-1/
reference_id USN-1134-1
reference_type
scores
url https://usn.ubuntu.com/1134-1/
fixed_packages
0
url pkg:apache/httpd@2.2.19
purl pkg:apache/httpd@2.2.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-5384-9rhf-5yby
3
vulnerability VCID-6bsk-g6yj-2khy
4
vulnerability VCID-6fav-yrx7-r7ar
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7x6x-s2w3-xygz
7
vulnerability VCID-8qcw-mekw-buh6
8
vulnerability VCID-8vkp-k5yr-n3bn
9
vulnerability VCID-9nuk-vm33-kkha
10
vulnerability VCID-bg3g-yc4h-3bdu
11
vulnerability VCID-cm2b-nhrm-mfdr
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-epgm-u9j7-7bd1
15
vulnerability VCID-grnf-r71w-r3h7
16
vulnerability VCID-h6qp-sn1h-byap
17
vulnerability VCID-kg8r-vq3s-2qa4
18
vulnerability VCID-m4ps-cv5v-n7fr
19
vulnerability VCID-ne55-gstx-1qfu
20
vulnerability VCID-nxqt-4e79-w3et
21
vulnerability VCID-p9db-n3kt-puhp
22
vulnerability VCID-rj9n-s2a4-w7he
23
vulnerability VCID-rxv4-mugn-akhf
24
vulnerability VCID-sfx1-4tej-gqgs
25
vulnerability VCID-szmq-1zrf-mfa6
26
vulnerability VCID-uhmn-527n-fqgq
27
vulnerability VCID-uhyk-pc9e-w7cu
28
vulnerability VCID-xmt2-8ett-qbgx
29
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.19
aliases CVE-2011-0419
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dr6d-j9as-qfby
27
url VCID-e4mk-ydp9-m3bx
vulnerability_id VCID-e4mk-ydp9-m3bx
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9788.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9788.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9788
reference_id
reference_type
scores
0
value 0.49498
scoring_system epss
scoring_elements 0.97869
published_at 2026-06-14T12:55:00Z
1
value 0.49498
scoring_system epss
scoring_elements 0.97859
published_at 2026-06-11T12:55:00Z
2
value 0.49498
scoring_system epss
scoring_elements 0.97868
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9788
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9788
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9788
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:N/A:P
1
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1470748
reference_id 1470748
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1470748
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868467
reference_id 868467
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868467
6
reference_url https://security.archlinux.org/ASA-201707-15
reference_id ASA-201707-15
reference_type
scores
url https://security.archlinux.org/ASA-201707-15
7
reference_url https://security.archlinux.org/AVG-350
reference_id AVG-350
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-350
8
reference_url https://httpd.apache.org/security/json/CVE-2017-9788.json
reference_id CVE-2017-9788
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2017-9788.json
9
reference_url https://security.gentoo.org/glsa/201710-32
reference_id GLSA-201710-32
reference_type
scores
url https://security.gentoo.org/glsa/201710-32
10
reference_url https://access.redhat.com/errata/RHSA-2017:2478
reference_id RHSA-2017:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2478
11
reference_url https://access.redhat.com/errata/RHSA-2017:2479
reference_id RHSA-2017:2479
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2479
12
reference_url https://access.redhat.com/errata/RHSA-2017:2483
reference_id RHSA-2017:2483
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2483
13
reference_url https://access.redhat.com/errata/RHSA-2017:2708
reference_id RHSA-2017:2708
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2708
14
reference_url https://access.redhat.com/errata/RHSA-2017:2709
reference_id RHSA-2017:2709
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2709
15
reference_url https://access.redhat.com/errata/RHSA-2017:2710
reference_id RHSA-2017:2710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2710
16
reference_url https://access.redhat.com/errata/RHSA-2017:3113
reference_id RHSA-2017:3113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3113
17
reference_url https://access.redhat.com/errata/RHSA-2017:3114
reference_id RHSA-2017:3114
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3114
18
reference_url https://access.redhat.com/errata/RHSA-2017:3193
reference_id RHSA-2017:3193
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3193
19
reference_url https://access.redhat.com/errata/RHSA-2017:3194
reference_id RHSA-2017:3194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3194
20
reference_url https://access.redhat.com/errata/RHSA-2017:3195
reference_id RHSA-2017:3195
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3195
21
reference_url https://access.redhat.com/errata/RHSA-2017:3239
reference_id RHSA-2017:3239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3239
22
reference_url https://access.redhat.com/errata/RHSA-2017:3240
reference_id RHSA-2017:3240
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3240
23
reference_url https://usn.ubuntu.com/3370-1/
reference_id USN-3370-1
reference_type
scores
url https://usn.ubuntu.com/3370-1/
24
reference_url https://usn.ubuntu.com/3370-2/
reference_id USN-3370-2
reference_type
scores
url https://usn.ubuntu.com/3370-2/
fixed_packages
0
url pkg:apache/httpd@2.2.34
purl pkg:apache/httpd@2.2.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-grnf-r71w-r3h7
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.34
1
url pkg:apache/httpd@2.4.27
purl pkg:apache/httpd@2.4.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7xcn-c8p4-j7ec
5
vulnerability VCID-8vas-wy6r-pkda
6
vulnerability VCID-9e8m-yzr3-pbgz
7
vulnerability VCID-9wx3-62cp-fuh8
8
vulnerability VCID-afat-n93z-8qeq
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-dk12-s4wp-suhc
11
vulnerability VCID-ea8s-ercf-qfdx
12
vulnerability VCID-gqvc-a75w-dqej
13
vulnerability VCID-grnf-r71w-r3h7
14
vulnerability VCID-h959-hrhy-wkep
15
vulnerability VCID-kp2b-t25c-sqfc
16
vulnerability VCID-mzxz-ujfq-qucw
17
vulnerability VCID-n8qk-qws2-9ydv
18
vulnerability VCID-pr6s-p29g-k3hv
19
vulnerability VCID-qw6u-prup-eqar
20
vulnerability VCID-rb9f-qwwr-v7c2
21
vulnerability VCID-rc99-4efu-tud2
22
vulnerability VCID-t95h-sdy4-tua1
23
vulnerability VCID-taua-zv9g-7kck
24
vulnerability VCID-tdub-a3cg-r7fg
25
vulnerability VCID-usz9-qezx-9ybx
26
vulnerability VCID-wf33-hszj-akf9
27
vulnerability VCID-xj85-t7py-93cf
28
vulnerability VCID-y5k7-ve1j-3bfc
29
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.27
aliases CVE-2017-9788
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e4mk-ydp9-m3bx
28
url VCID-ehc1-xda2-8bb3
vulnerability_id VCID-ehc1-xda2-8bb3
summary A flaw was found in the mod_proxy_ftp module. In a reverse proxy configuration, a remote attacker could use this flaw to bypass intended access restrictions by creating a carefully-crafted HTTP Authorization header, allowing the attacker to send arbitrary commands to the FTP server.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3095.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3095.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3095
reference_id
reference_type
scores
0
value 0.03845
scoring_system epss
scoring_elements 0.88455
published_at 2026-06-11T12:55:00Z
1
value 0.03845
scoring_system epss
scoring_elements 0.88495
published_at 2026-06-12T12:55:00Z
2
value 0.03845
scoring_system epss
scoring_elements 0.88502
published_at 2026-06-13T12:55:00Z
3
value 0.03845
scoring_system epss
scoring_elements 0.88501
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3095
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=522209
reference_id 522209
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=522209
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545951
reference_id 545951
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545951
5
reference_url https://httpd.apache.org/security/json/CVE-2009-3095.json
reference_id CVE-2009-3095
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-3095.json
6
reference_url https://usn.ubuntu.com/860-1/
reference_id USN-860-1
reference_type
scores
url https://usn.ubuntu.com/860-1/
fixed_packages
0
url pkg:apache/httpd@2.2.14
purl pkg:apache/httpd@2.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cm2b-nhrm-mfdr
18
vulnerability VCID-dj7a-88wd-dugh
19
vulnerability VCID-dr6d-j9as-qfby
20
vulnerability VCID-e4mk-ydp9-m3bx
21
vulnerability VCID-epgm-u9j7-7bd1
22
vulnerability VCID-grnf-r71w-r3h7
23
vulnerability VCID-h6qp-sn1h-byap
24
vulnerability VCID-kg8r-vq3s-2qa4
25
vulnerability VCID-m4ps-cv5v-n7fr
26
vulnerability VCID-ne55-gstx-1qfu
27
vulnerability VCID-nxqt-4e79-w3et
28
vulnerability VCID-p9db-n3kt-puhp
29
vulnerability VCID-rj9n-s2a4-w7he
30
vulnerability VCID-sfx1-4tej-gqgs
31
vulnerability VCID-szmq-1zrf-mfa6
32
vulnerability VCID-uhmn-527n-fqgq
33
vulnerability VCID-uhyk-pc9e-w7cu
34
vulnerability VCID-vy92-b4as-a7hp
35
vulnerability VCID-xmt2-8ett-qbgx
36
vulnerability VCID-xn4w-pvu5-dyhb
37
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.14
aliases CVE-2009-3095
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ehc1-xda2-8bb3
29
url VCID-epgm-u9j7-7bd1
vulnerability_id VCID-epgm-u9j7-7bd1
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4975.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4975.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4975
reference_id
reference_type
scores
0
value 0.59605
scoring_system epss
scoring_elements 0.98289
published_at 2026-06-11T12:55:00Z
1
value 0.59605
scoring_system epss
scoring_elements 0.98296
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4975
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4975
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1375968
reference_id 1375968
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1375968
5
reference_url https://httpd.apache.org/security/json/CVE-2016-4975.json
reference_id CVE-2016-4975
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2016-4975.json
6
reference_url https://access.redhat.com/errata/RHSA-2017:0906
reference_id RHSA-2017:0906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0906
7
reference_url https://access.redhat.com/errata/RHSA-2018:2185
reference_id RHSA-2018:2185
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2185
8
reference_url https://access.redhat.com/errata/RHSA-2018:2186
reference_id RHSA-2018:2186
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2186
9
reference_url https://access.redhat.com/errata/RHSA-2018:2486
reference_id RHSA-2018:2486
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:2486
fixed_packages
0
url pkg:apache/httpd@2.2.32
purl pkg:apache/httpd@2.2.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44ma-b8wt-67fa
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-grnf-r71w-r3h7
4
vulnerability VCID-nxqt-4e79-w3et
5
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.32
1
url pkg:apache/httpd@2.4.25
purl pkg:apache/httpd@2.4.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-44ma-b8wt-67fa
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7xcn-c8p4-j7ec
7
vulnerability VCID-8vas-wy6r-pkda
8
vulnerability VCID-9e8m-yzr3-pbgz
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-afat-n93z-8qeq
11
vulnerability VCID-arm8-rmce-2bec
12
vulnerability VCID-dk12-s4wp-suhc
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-ea8s-ercf-qfdx
15
vulnerability VCID-gqvc-a75w-dqej
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kp2b-t25c-sqfc
19
vulnerability VCID-mzxz-ujfq-qucw
20
vulnerability VCID-n8qk-qws2-9ydv
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-pr6s-p29g-k3hv
23
vulnerability VCID-qw6u-prup-eqar
24
vulnerability VCID-rb9f-qwwr-v7c2
25
vulnerability VCID-rc99-4efu-tud2
26
vulnerability VCID-t95h-sdy4-tua1
27
vulnerability VCID-taua-zv9g-7kck
28
vulnerability VCID-tdub-a3cg-r7fg
29
vulnerability VCID-uhyk-pc9e-w7cu
30
vulnerability VCID-usz9-qezx-9ybx
31
vulnerability VCID-wf33-hszj-akf9
32
vulnerability VCID-x7bx-d6tn-fbhf
33
vulnerability VCID-xj85-t7py-93cf
34
vulnerability VCID-y5k7-ve1j-3bfc
35
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.25
aliases CVE-2016-4975
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-epgm-u9j7-7bd1
30
url VCID-fsva-ef97-87hs
vulnerability_id VCID-fsva-ef97-87hs
summary A denial of service flaw was found in the mod_proxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1890.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1890.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-1890
reference_id
reference_type
scores
0
value 0.3787
scoring_system epss
scoring_elements 0.97308
published_at 2026-06-11T12:55:00Z
1
value 0.3787
scoring_system epss
scoring_elements 0.97316
published_at 2026-06-12T12:55:00Z
2
value 0.3787
scoring_system epss
scoring_elements 0.97317
published_at 2026-06-13T12:55:00Z
3
value 0.3787
scoring_system epss
scoring_elements 0.97318
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-1890
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=509375
reference_id 509375
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=509375
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536718
reference_id 536718
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536718
5
reference_url https://httpd.apache.org/security/json/CVE-2009-1890.json
reference_id CVE-2009-1890
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-1890.json
6
reference_url https://security.gentoo.org/glsa/200907-04
reference_id GLSA-200907-04
reference_type
scores
url https://security.gentoo.org/glsa/200907-04
7
reference_url https://access.redhat.com/errata/RHSA-2009:1148
reference_id RHSA-2009:1148
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1148
8
reference_url https://access.redhat.com/errata/RHSA-2009:1155
reference_id RHSA-2009:1155
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1155
9
reference_url https://access.redhat.com/errata/RHSA-2009:1160
reference_id RHSA-2009:1160
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1160
10
reference_url https://usn.ubuntu.com/802-1/
reference_id USN-802-1
reference_type
scores
url https://usn.ubuntu.com/802-1/
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2009-1890
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fsva-ef97-87hs
31
url VCID-fwbt-3uqc-sqf7
vulnerability_id VCID-fwbt-3uqc-sqf7
summary A NULL pointer dereference flaw was found in the mod_proxy_ftp module. A malicious FTP server to which requests are being proxied could use this flaw to crash an httpd child process via a malformed reply to the EPSV or PASV commands, resulting in a limited denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3094.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3094.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3094
reference_id
reference_type
scores
0
value 0.02833
scoring_system epss
scoring_elements 0.86502
published_at 2026-06-11T12:55:00Z
1
value 0.02833
scoring_system epss
scoring_elements 0.86553
published_at 2026-06-12T12:55:00Z
2
value 0.02833
scoring_system epss
scoring_elements 0.86562
published_at 2026-06-13T12:55:00Z
3
value 0.02833
scoring_system epss
scoring_elements 0.8656
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3094
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=521619
reference_id 521619
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=521619
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545951
reference_id 545951
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545951
5
reference_url https://httpd.apache.org/security/json/CVE-2009-3094.json
reference_id CVE-2009-3094
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-3094.json
6
reference_url https://usn.ubuntu.com/860-1/
reference_id USN-860-1
reference_type
scores
url https://usn.ubuntu.com/860-1/
fixed_packages
0
url pkg:apache/httpd@2.2.14
purl pkg:apache/httpd@2.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cm2b-nhrm-mfdr
18
vulnerability VCID-dj7a-88wd-dugh
19
vulnerability VCID-dr6d-j9as-qfby
20
vulnerability VCID-e4mk-ydp9-m3bx
21
vulnerability VCID-epgm-u9j7-7bd1
22
vulnerability VCID-grnf-r71w-r3h7
23
vulnerability VCID-h6qp-sn1h-byap
24
vulnerability VCID-kg8r-vq3s-2qa4
25
vulnerability VCID-m4ps-cv5v-n7fr
26
vulnerability VCID-ne55-gstx-1qfu
27
vulnerability VCID-nxqt-4e79-w3et
28
vulnerability VCID-p9db-n3kt-puhp
29
vulnerability VCID-rj9n-s2a4-w7he
30
vulnerability VCID-sfx1-4tej-gqgs
31
vulnerability VCID-szmq-1zrf-mfa6
32
vulnerability VCID-uhmn-527n-fqgq
33
vulnerability VCID-uhyk-pc9e-w7cu
34
vulnerability VCID-vy92-b4as-a7hp
35
vulnerability VCID-xmt2-8ett-qbgx
36
vulnerability VCID-xn4w-pvu5-dyhb
37
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.14
aliases CVE-2009-3094
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fwbt-3uqc-sqf7
32
url VCID-g655-us3x-37c2
vulnerability_id VCID-g655-us3x-37c2
summary A flaw was found in the mod_imagemap module. On sites where mod_imagemap is enabled and an imagemap file is publicly available, a cross-site scripting attack is possible.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5000.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5000.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-5000
reference_id
reference_type
scores
0
value 0.78073
scoring_system epss
scoring_elements 0.99038
published_at 2026-06-11T12:55:00Z
1
value 0.78073
scoring_system epss
scoring_elements 0.99043
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-5000
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5000
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5000
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=419931
reference_id 419931
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=419931
4
reference_url https://httpd.apache.org/security/json/CVE-2007-5000.json
reference_id CVE-2007-5000
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-5000.json
5
reference_url https://access.redhat.com/errata/RHSA-2008:0004
reference_id RHSA-2008:0004
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0004
6
reference_url https://access.redhat.com/errata/RHSA-2008:0005
reference_id RHSA-2008:0005
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0005
7
reference_url https://access.redhat.com/errata/RHSA-2008:0006
reference_id RHSA-2008:0006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0006
8
reference_url https://access.redhat.com/errata/RHSA-2008:0007
reference_id RHSA-2008:0007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0007
9
reference_url https://access.redhat.com/errata/RHSA-2008:0008
reference_id RHSA-2008:0008
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0008
10
reference_url https://access.redhat.com/errata/RHSA-2008:0263
reference_id RHSA-2008:0263
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0263
11
reference_url https://access.redhat.com/errata/RHSA-2008:0523
reference_id RHSA-2008:0523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0523
12
reference_url https://usn.ubuntu.com/575-1/
reference_id USN-575-1
reference_type
scores
url https://usn.ubuntu.com/575-1/
fixed_packages
0
url pkg:apache/httpd@2.2.8
purl pkg:apache/httpd@2.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-awb7-8p6u-2fa3
18
vulnerability VCID-bg3g-yc4h-3bdu
19
vulnerability VCID-cbcf-d64d-8bd2
20
vulnerability VCID-cm2b-nhrm-mfdr
21
vulnerability VCID-dj7a-88wd-dugh
22
vulnerability VCID-dkh9-b39c-uqgz
23
vulnerability VCID-dr6d-j9as-qfby
24
vulnerability VCID-e4mk-ydp9-m3bx
25
vulnerability VCID-ehc1-xda2-8bb3
26
vulnerability VCID-epgm-u9j7-7bd1
27
vulnerability VCID-fsva-ef97-87hs
28
vulnerability VCID-fwbt-3uqc-sqf7
29
vulnerability VCID-grnf-r71w-r3h7
30
vulnerability VCID-h6qp-sn1h-byap
31
vulnerability VCID-hv8d-3r75-abfb
32
vulnerability VCID-kg8r-vq3s-2qa4
33
vulnerability VCID-m7y1-9mdy-6bfx
34
vulnerability VCID-ne55-gstx-1qfu
35
vulnerability VCID-nxqt-4e79-w3et
36
vulnerability VCID-p9db-n3kt-puhp
37
vulnerability VCID-rj9n-s2a4-w7he
38
vulnerability VCID-sfx1-4tej-gqgs
39
vulnerability VCID-szmq-1zrf-mfa6
40
vulnerability VCID-uhmn-527n-fqgq
41
vulnerability VCID-uhyk-pc9e-w7cu
42
vulnerability VCID-ukk2-3cpg-7ugy
43
vulnerability VCID-vu91-nh94-nkb2
44
vulnerability VCID-vy92-b4as-a7hp
45
vulnerability VCID-w4b1-tu6b-mkc7
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.8
aliases CVE-2007-5000
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g655-us3x-37c2
33
url VCID-grnf-r71w-r3h7
vulnerability_id VCID-grnf-r71w-r3h7
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9798.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9798
reference_id
reference_type
scores
0
value 0.9384
scoring_system epss
scoring_elements 0.99875
published_at 2026-06-14T12:55:00Z
1
value 0.9384
scoring_system epss
scoring_elements 0.99874
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9798
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1490344
reference_id 1490344
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1490344
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876109
reference_id 876109
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876109
6
reference_url https://security.archlinux.org/ASA-201709-15
reference_id ASA-201709-15
reference_type
scores
url https://security.archlinux.org/ASA-201709-15
7
reference_url https://security.archlinux.org/AVG-404
reference_id AVG-404
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-404
8
reference_url https://httpd.apache.org/security/json/CVE-2017-9798.json
reference_id CVE-2017-9798
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2017-9798.json
9
reference_url https://github.com/hannob/optionsbleed/blob/e297ce13cfb0f338b2cabfb81a70349fd6925f82/optionsbleed
reference_id CVE-2017-9798;OPTIONSBLEED
reference_type exploit
scores
url https://github.com/hannob/optionsbleed/blob/e297ce13cfb0f338b2cabfb81a70349fd6925f82/optionsbleed
10
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/42745.py
reference_id CVE-2017-9798;OPTIONSBLEED
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/42745.py
11
reference_url https://security.gentoo.org/glsa/201710-32
reference_id GLSA-201710-32
reference_type
scores
url https://security.gentoo.org/glsa/201710-32
12
reference_url https://access.redhat.com/errata/RHSA-2017:2882
reference_id RHSA-2017:2882
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2882
13
reference_url https://access.redhat.com/errata/RHSA-2017:2972
reference_id RHSA-2017:2972
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2972
14
reference_url https://access.redhat.com/errata/RHSA-2017:3018
reference_id RHSA-2017:3018
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3018
15
reference_url https://access.redhat.com/errata/RHSA-2017:3113
reference_id RHSA-2017:3113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3113
16
reference_url https://access.redhat.com/errata/RHSA-2017:3114
reference_id RHSA-2017:3114
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3114
17
reference_url https://access.redhat.com/errata/RHSA-2017:3193
reference_id RHSA-2017:3193
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3193
18
reference_url https://access.redhat.com/errata/RHSA-2017:3194
reference_id RHSA-2017:3194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3194
19
reference_url https://access.redhat.com/errata/RHSA-2017:3195
reference_id RHSA-2017:3195
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3195
20
reference_url https://access.redhat.com/errata/RHSA-2017:3239
reference_id RHSA-2017:3239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3239
21
reference_url https://access.redhat.com/errata/RHSA-2017:3240
reference_id RHSA-2017:3240
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3240
22
reference_url https://access.redhat.com/errata/RHSA-2017:3475
reference_id RHSA-2017:3475
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3475
23
reference_url https://access.redhat.com/errata/RHSA-2017:3476
reference_id RHSA-2017:3476
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3476
24
reference_url https://access.redhat.com/errata/RHSA-2017:3477
reference_id RHSA-2017:3477
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3477
25
reference_url https://usn.ubuntu.com/3425-1/
reference_id USN-3425-1
reference_type
scores
url https://usn.ubuntu.com/3425-1/
26
reference_url https://usn.ubuntu.com/3425-2/
reference_id USN-3425-2
reference_type
scores
url https://usn.ubuntu.com/3425-2/
fixed_packages
0
url pkg:apache/httpd@2.4.28
purl pkg:apache/httpd@2.4.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7xcn-c8p4-j7ec
5
vulnerability VCID-8vas-wy6r-pkda
6
vulnerability VCID-9e8m-yzr3-pbgz
7
vulnerability VCID-9wx3-62cp-fuh8
8
vulnerability VCID-afat-n93z-8qeq
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-dk12-s4wp-suhc
11
vulnerability VCID-ea8s-ercf-qfdx
12
vulnerability VCID-gqvc-a75w-dqej
13
vulnerability VCID-h959-hrhy-wkep
14
vulnerability VCID-kp2b-t25c-sqfc
15
vulnerability VCID-mzxz-ujfq-qucw
16
vulnerability VCID-n8qk-qws2-9ydv
17
vulnerability VCID-pr6s-p29g-k3hv
18
vulnerability VCID-qw6u-prup-eqar
19
vulnerability VCID-rb9f-qwwr-v7c2
20
vulnerability VCID-rc99-4efu-tud2
21
vulnerability VCID-t95h-sdy4-tua1
22
vulnerability VCID-taua-zv9g-7kck
23
vulnerability VCID-tdub-a3cg-r7fg
24
vulnerability VCID-usz9-qezx-9ybx
25
vulnerability VCID-wf33-hszj-akf9
26
vulnerability VCID-xj85-t7py-93cf
27
vulnerability VCID-y5k7-ve1j-3bfc
28
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.28
aliases CVE-2017-9798
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-grnf-r71w-r3h7
34
url VCID-h6qp-sn1h-byap
vulnerability_id VCID-h6qp-sn1h-byap
summary An integer overflow flaw was found which, when the mod_setenvif module is enabled, could allow local users to gain privileges via a .htaccess file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3607.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3607.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3607
reference_id
reference_type
scores
0
value 0.00591
scoring_system epss
scoring_elements 0.69684
published_at 2026-06-11T12:55:00Z
1
value 0.00591
scoring_system epss
scoring_elements 0.69775
published_at 2026-06-12T12:55:00Z
2
value 0.00591
scoring_system epss
scoring_elements 0.69789
published_at 2026-06-13T12:55:00Z
3
value 0.00591
scoring_system epss
scoring_elements 0.69786
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3607
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=769844
reference_id 769844
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=769844
4
reference_url https://httpd.apache.org/security/json/CVE-2011-3607.json
reference_id CVE-2011-3607
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2011-3607.json
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41769.txt
reference_id CVE-2011-4415;CVE-2011-3607
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41769.txt
6
reference_url http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/
reference_id CVE-2011-4415;CVE-2011-3607
reference_type exploit
scores
url http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/
7
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
8
reference_url https://access.redhat.com/errata/RHSA-2012:0128
reference_id RHSA-2012:0128
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0128
9
reference_url https://access.redhat.com/errata/RHSA-2012:0323
reference_id RHSA-2012:0323
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0323
10
reference_url https://access.redhat.com/errata/RHSA-2012:0542
reference_id RHSA-2012:0542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0542
11
reference_url https://access.redhat.com/errata/RHSA-2012:0543
reference_id RHSA-2012:0543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0543
12
reference_url https://usn.ubuntu.com/1368-1/
reference_id USN-1368-1
reference_type
scores
url https://usn.ubuntu.com/1368-1/
fixed_packages
0
url pkg:apache/httpd@2.2.22
purl pkg:apache/httpd@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-7x6x-s2w3-xygz
5
vulnerability VCID-8qcw-mekw-buh6
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9nuk-vm33-kkha
8
vulnerability VCID-cm2b-nhrm-mfdr
9
vulnerability VCID-dj7a-88wd-dugh
10
vulnerability VCID-e4mk-ydp9-m3bx
11
vulnerability VCID-epgm-u9j7-7bd1
12
vulnerability VCID-grnf-r71w-r3h7
13
vulnerability VCID-kg8r-vq3s-2qa4
14
vulnerability VCID-nxqt-4e79-w3et
15
vulnerability VCID-p9db-n3kt-puhp
16
vulnerability VCID-rj9n-s2a4-w7he
17
vulnerability VCID-sfx1-4tej-gqgs
18
vulnerability VCID-uhmn-527n-fqgq
19
vulnerability VCID-uhyk-pc9e-w7cu
20
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.22
aliases CVE-2011-3607
risk_score 4.2
exploitability 2.0
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h6qp-sn1h-byap
35
url VCID-hv8d-3r75-abfb
vulnerability_id VCID-hv8d-3r75-abfb
summary A denial of service flaw was found in the mod_deflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would cause mod_deflate to consume large amounts of CPU if mod_deflate was enabled for a large file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1891.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1891.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-1891
reference_id
reference_type
scores
0
value 0.20968
scoring_system epss
scoring_elements 0.95771
published_at 2026-06-11T12:55:00Z
1
value 0.20968
scoring_system epss
scoring_elements 0.95785
published_at 2026-06-13T12:55:00Z
2
value 0.20968
scoring_system epss
scoring_elements 0.95788
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-1891
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=509125
reference_id 509125
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=509125
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712
reference_id 534712
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712
5
reference_url https://httpd.apache.org/security/json/CVE-2009-1891.json
reference_id CVE-2009-1891
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-1891.json
6
reference_url https://security.gentoo.org/glsa/200907-04
reference_id GLSA-200907-04
reference_type
scores
url https://security.gentoo.org/glsa/200907-04
7
reference_url https://access.redhat.com/errata/RHSA-2009:1148
reference_id RHSA-2009:1148
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1148
8
reference_url https://access.redhat.com/errata/RHSA-2009:1155
reference_id RHSA-2009:1155
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1155
9
reference_url https://access.redhat.com/errata/RHSA-2009:1160
reference_id RHSA-2009:1160
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1160
10
reference_url https://access.redhat.com/errata/RHSA-2009:1205
reference_id RHSA-2009:1205
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1205
11
reference_url https://usn.ubuntu.com/802-1/
reference_id USN-802-1
reference_type
scores
url https://usn.ubuntu.com/802-1/
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2009-1891
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hv8d-3r75-abfb
36
url VCID-ka22-e3wp-yff7
vulnerability_id VCID-ka22-e3wp-yff7
summary A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is enabled this could lead to a cross-site scripting attack. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5752.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5752.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-5752
reference_id
reference_type
scores
0
value 0.18368
scoring_system epss
scoring_elements 0.95378
published_at 2026-06-11T12:55:00Z
1
value 0.18368
scoring_system epss
scoring_elements 0.95392
published_at 2026-06-12T12:55:00Z
2
value 0.18368
scoring_system epss
scoring_elements 0.95397
published_at 2026-06-13T12:55:00Z
3
value 0.18368
scoring_system epss
scoring_elements 0.95398
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-5752
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5752
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5752
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=245112
reference_id 245112
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=245112
4
reference_url https://httpd.apache.org/security/json/CVE-2006-5752.json
reference_id CVE-2006-5752
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2006-5752.json
5
reference_url https://security.gentoo.org/glsa/200711-06
reference_id GLSA-200711-06
reference_type
scores
url https://security.gentoo.org/glsa/200711-06
6
reference_url https://access.redhat.com/errata/RHSA-2007:0532
reference_id RHSA-2007:0532
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0532
7
reference_url https://access.redhat.com/errata/RHSA-2007:0533
reference_id RHSA-2007:0533
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0533
8
reference_url https://access.redhat.com/errata/RHSA-2007:0534
reference_id RHSA-2007:0534
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0534
9
reference_url https://access.redhat.com/errata/RHSA-2007:0556
reference_id RHSA-2007:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0556
10
reference_url https://access.redhat.com/errata/RHSA-2007:0557
reference_id RHSA-2007:0557
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0557
11
reference_url https://access.redhat.com/errata/RHSA-2008:0263
reference_id RHSA-2008:0263
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0263
12
reference_url https://access.redhat.com/errata/RHSA-2008:0523
reference_id RHSA-2008:0523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0523
13
reference_url https://usn.ubuntu.com/499-1/
reference_id USN-499-1
reference_type
scores
url https://usn.ubuntu.com/499-1/
fixed_packages
0
url pkg:apache/httpd@2.2.6
purl pkg:apache/httpd@2.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-9qsz-zr6r-z3c3
18
vulnerability VCID-awb7-8p6u-2fa3
19
vulnerability VCID-bame-16es-e7a2
20
vulnerability VCID-bg3g-yc4h-3bdu
21
vulnerability VCID-cbcf-d64d-8bd2
22
vulnerability VCID-cm2b-nhrm-mfdr
23
vulnerability VCID-dj7a-88wd-dugh
24
vulnerability VCID-dkh9-b39c-uqgz
25
vulnerability VCID-dr6d-j9as-qfby
26
vulnerability VCID-e4mk-ydp9-m3bx
27
vulnerability VCID-ehc1-xda2-8bb3
28
vulnerability VCID-epgm-u9j7-7bd1
29
vulnerability VCID-fsva-ef97-87hs
30
vulnerability VCID-fwbt-3uqc-sqf7
31
vulnerability VCID-g655-us3x-37c2
32
vulnerability VCID-grnf-r71w-r3h7
33
vulnerability VCID-h6qp-sn1h-byap
34
vulnerability VCID-hv8d-3r75-abfb
35
vulnerability VCID-kg8r-vq3s-2qa4
36
vulnerability VCID-m7y1-9mdy-6bfx
37
vulnerability VCID-n9f3-w699-97fe
38
vulnerability VCID-ne55-gstx-1qfu
39
vulnerability VCID-nxqt-4e79-w3et
40
vulnerability VCID-p9db-n3kt-puhp
41
vulnerability VCID-pfc7-ap3y-u7ds
42
vulnerability VCID-rj9n-s2a4-w7he
43
vulnerability VCID-sfx1-4tej-gqgs
44
vulnerability VCID-szmq-1zrf-mfa6
45
vulnerability VCID-uhmn-527n-fqgq
46
vulnerability VCID-uhyk-pc9e-w7cu
47
vulnerability VCID-ukk2-3cpg-7ugy
48
vulnerability VCID-vu91-nh94-nkb2
49
vulnerability VCID-vy92-b4as-a7hp
50
vulnerability VCID-w4b1-tu6b-mkc7
51
vulnerability VCID-xmt2-8ett-qbgx
52
vulnerability VCID-xn4w-pvu5-dyhb
53
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.6
aliases CVE-2006-5752
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ka22-e3wp-yff7
37
url VCID-kg8r-vq3s-2qa4
vulnerability_id VCID-kg8r-vq3s-2qa4
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5387.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5387.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5387
reference_id
reference_type
scores
0
value 0.43937
scoring_system epss
scoring_elements 0.97619
published_at 2026-06-11T12:55:00Z
1
value 0.43937
scoring_system epss
scoring_elements 0.97627
published_at 2026-06-13T12:55:00Z
2
value 0.43937
scoring_system epss
scoring_elements 0.97628
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5387
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1353755
reference_id 1353755
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1353755
5
reference_url https://httpd.apache.org/security/json/CVE-2016-5387.json
reference_id CVE-2016-5387
reference_type
scores
0
value n/a
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2016-5387.json
6
reference_url https://security.gentoo.org/glsa/201701-36
reference_id GLSA-201701-36
reference_type
scores
url https://security.gentoo.org/glsa/201701-36
7
reference_url https://access.redhat.com/errata/RHSA-2016:1420
reference_id RHSA-2016:1420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1420
8
reference_url https://access.redhat.com/errata/RHSA-2016:1421
reference_id RHSA-2016:1421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1421
9
reference_url https://access.redhat.com/errata/RHSA-2016:1422
reference_id RHSA-2016:1422
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1422
10
reference_url https://access.redhat.com/errata/RHSA-2016:1625
reference_id RHSA-2016:1625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1625
11
reference_url https://access.redhat.com/errata/RHSA-2016:1648
reference_id RHSA-2016:1648
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1648
12
reference_url https://access.redhat.com/errata/RHSA-2016:1649
reference_id RHSA-2016:1649
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1649
13
reference_url https://access.redhat.com/errata/RHSA-2016:1650
reference_id RHSA-2016:1650
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1650
14
reference_url https://access.redhat.com/errata/RHSA-2016:1851
reference_id RHSA-2016:1851
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1851
15
reference_url https://usn.ubuntu.com/3038-1/
reference_id USN-3038-1
reference_type
scores
url https://usn.ubuntu.com/3038-1/
fixed_packages
0
url pkg:apache/httpd@2.2.32
purl pkg:apache/httpd@2.2.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44ma-b8wt-67fa
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-grnf-r71w-r3h7
4
vulnerability VCID-nxqt-4e79-w3et
5
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.32
1
url pkg:apache/httpd@2.4.25
purl pkg:apache/httpd@2.4.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-44ma-b8wt-67fa
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7xcn-c8p4-j7ec
7
vulnerability VCID-8vas-wy6r-pkda
8
vulnerability VCID-9e8m-yzr3-pbgz
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-afat-n93z-8qeq
11
vulnerability VCID-arm8-rmce-2bec
12
vulnerability VCID-dk12-s4wp-suhc
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-ea8s-ercf-qfdx
15
vulnerability VCID-gqvc-a75w-dqej
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kp2b-t25c-sqfc
19
vulnerability VCID-mzxz-ujfq-qucw
20
vulnerability VCID-n8qk-qws2-9ydv
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-pr6s-p29g-k3hv
23
vulnerability VCID-qw6u-prup-eqar
24
vulnerability VCID-rb9f-qwwr-v7c2
25
vulnerability VCID-rc99-4efu-tud2
26
vulnerability VCID-t95h-sdy4-tua1
27
vulnerability VCID-taua-zv9g-7kck
28
vulnerability VCID-tdub-a3cg-r7fg
29
vulnerability VCID-uhyk-pc9e-w7cu
30
vulnerability VCID-usz9-qezx-9ybx
31
vulnerability VCID-wf33-hszj-akf9
32
vulnerability VCID-x7bx-d6tn-fbhf
33
vulnerability VCID-xj85-t7py-93cf
34
vulnerability VCID-y5k7-ve1j-3bfc
35
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.25
aliases CVE-2016-5387
risk_score 2.2
exploitability 0.5
weighted_severity 4.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kg8r-vq3s-2qa4
38
url VCID-m7y1-9mdy-6bfx
vulnerability_id VCID-m7y1-9mdy-6bfx
summary A flaw was found in the handling of the "Options" and "AllowOverride" directives. In configurations using the "AllowOverride" directive with certain "Options=" arguments, local users were not restricted from executing commands from a Server-Side-Include script as intended.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1195.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1195.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-1195
reference_id
reference_type
scores
0
value 0.00189
scoring_system epss
scoring_elements 0.40618
published_at 2026-06-11T12:55:00Z
1
value 0.00189
scoring_system epss
scoring_elements 0.40785
published_at 2026-06-12T12:55:00Z
2
value 0.00189
scoring_system epss
scoring_elements 0.40808
published_at 2026-06-13T12:55:00Z
3
value 0.00189
scoring_system epss
scoring_elements 0.40795
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-1195
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1195
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1195
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=489436
reference_id 489436
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=489436
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530834
reference_id 530834
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530834
5
reference_url https://httpd.apache.org/security/json/CVE-2009-1195.json
reference_id CVE-2009-1195
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-1195.json
6
reference_url https://security.gentoo.org/glsa/200907-04
reference_id GLSA-200907-04
reference_type
scores
url https://security.gentoo.org/glsa/200907-04
7
reference_url https://access.redhat.com/errata/RHSA-2009:1075
reference_id RHSA-2009:1075
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1075
8
reference_url https://access.redhat.com/errata/RHSA-2009:1155
reference_id RHSA-2009:1155
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1155
9
reference_url https://access.redhat.com/errata/RHSA-2009:1160
reference_id RHSA-2009:1160
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1160
10
reference_url https://usn.ubuntu.com/787-1/
reference_id USN-787-1
reference_type
scores
url https://usn.ubuntu.com/787-1/
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2009-1195
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m7y1-9mdy-6bfx
39
url VCID-n9f3-w699-97fe
vulnerability_id VCID-n9f3-w699-97fe
summary A flaw was found in the mod_proxy_balancer module. On sites where mod_proxy_balancer is enabled, a cross-site scripting attack against an authorized user is possible.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6421.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6421.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-6421
reference_id
reference_type
scores
0
value 0.03305
scoring_system epss
scoring_elements 0.87516
published_at 2026-06-11T12:55:00Z
1
value 0.03305
scoring_system epss
scoring_elements 0.87559
published_at 2026-06-12T12:55:00Z
2
value 0.03305
scoring_system epss
scoring_elements 0.87566
published_at 2026-06-13T12:55:00Z
3
value 0.03305
scoring_system epss
scoring_elements 0.87561
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-6421
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6421
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=427229
reference_id 427229
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=427229
4
reference_url https://httpd.apache.org/security/json/CVE-2007-6421.json
reference_id CVE-2007-6421
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-6421.json
5
reference_url https://access.redhat.com/errata/RHSA-2008:0008
reference_id RHSA-2008:0008
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0008
6
reference_url https://usn.ubuntu.com/575-1/
reference_id USN-575-1
reference_type
scores
url https://usn.ubuntu.com/575-1/
fixed_packages
0
url pkg:apache/httpd@2.2.8
purl pkg:apache/httpd@2.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-awb7-8p6u-2fa3
18
vulnerability VCID-bg3g-yc4h-3bdu
19
vulnerability VCID-cbcf-d64d-8bd2
20
vulnerability VCID-cm2b-nhrm-mfdr
21
vulnerability VCID-dj7a-88wd-dugh
22
vulnerability VCID-dkh9-b39c-uqgz
23
vulnerability VCID-dr6d-j9as-qfby
24
vulnerability VCID-e4mk-ydp9-m3bx
25
vulnerability VCID-ehc1-xda2-8bb3
26
vulnerability VCID-epgm-u9j7-7bd1
27
vulnerability VCID-fsva-ef97-87hs
28
vulnerability VCID-fwbt-3uqc-sqf7
29
vulnerability VCID-grnf-r71w-r3h7
30
vulnerability VCID-h6qp-sn1h-byap
31
vulnerability VCID-hv8d-3r75-abfb
32
vulnerability VCID-kg8r-vq3s-2qa4
33
vulnerability VCID-m7y1-9mdy-6bfx
34
vulnerability VCID-ne55-gstx-1qfu
35
vulnerability VCID-nxqt-4e79-w3et
36
vulnerability VCID-p9db-n3kt-puhp
37
vulnerability VCID-rj9n-s2a4-w7he
38
vulnerability VCID-sfx1-4tej-gqgs
39
vulnerability VCID-szmq-1zrf-mfa6
40
vulnerability VCID-uhmn-527n-fqgq
41
vulnerability VCID-uhyk-pc9e-w7cu
42
vulnerability VCID-ukk2-3cpg-7ugy
43
vulnerability VCID-vu91-nh94-nkb2
44
vulnerability VCID-vy92-b4as-a7hp
45
vulnerability VCID-w4b1-tu6b-mkc7
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.8
aliases CVE-2007-6421
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n9f3-w699-97fe
40
url VCID-ne55-gstx-1qfu
vulnerability_id VCID-ne55-gstx-1qfu
summary An additional exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or ProxyPassMatch, a remote attacker could cause the reverse proxy to connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to attacker.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4317.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4317.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4317
reference_id
reference_type
scores
0
value 0.77975
scoring_system epss
scoring_elements 0.99033
published_at 2026-06-11T12:55:00Z
1
value 0.77975
scoring_system epss
scoring_elements 0.99037
published_at 2026-06-12T12:55:00Z
2
value 0.77975
scoring_system epss
scoring_elements 0.99038
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4317
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=756483
reference_id 756483
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=756483
4
reference_url https://httpd.apache.org/security/json/CVE-2011-4317.json
reference_id CVE-2011-4317
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2011-4317.json
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/36352.txt
reference_id CVE-2011-4317;OSVDB-77310
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/36352.txt
6
reference_url https://www.securityfocus.com/bid/50802/info
reference_id CVE-2011-4317;OSVDB-77310
reference_type exploit
scores
url https://www.securityfocus.com/bid/50802/info
7
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
8
reference_url https://access.redhat.com/errata/RHSA-2012:0128
reference_id RHSA-2012:0128
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0128
9
reference_url https://usn.ubuntu.com/1368-1/
reference_id USN-1368-1
reference_type
scores
url https://usn.ubuntu.com/1368-1/
fixed_packages
0
url pkg:apache/httpd@2.2.22
purl pkg:apache/httpd@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-7x6x-s2w3-xygz
5
vulnerability VCID-8qcw-mekw-buh6
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9nuk-vm33-kkha
8
vulnerability VCID-cm2b-nhrm-mfdr
9
vulnerability VCID-dj7a-88wd-dugh
10
vulnerability VCID-e4mk-ydp9-m3bx
11
vulnerability VCID-epgm-u9j7-7bd1
12
vulnerability VCID-grnf-r71w-r3h7
13
vulnerability VCID-kg8r-vq3s-2qa4
14
vulnerability VCID-nxqt-4e79-w3et
15
vulnerability VCID-p9db-n3kt-puhp
16
vulnerability VCID-rj9n-s2a4-w7he
17
vulnerability VCID-sfx1-4tej-gqgs
18
vulnerability VCID-uhmn-527n-fqgq
19
vulnerability VCID-uhyk-pc9e-w7cu
20
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.22
aliases CVE-2011-4317
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ne55-gstx-1qfu
41
url VCID-nxqt-4e79-w3et
vulnerability_id VCID-nxqt-4e79-w3et
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3169.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3169.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-3169
reference_id
reference_type
scores
0
value 0.30773
scoring_system epss
scoring_elements 0.96857
published_at 2026-06-14T12:55:00Z
1
value 0.30773
scoring_system epss
scoring_elements 0.96843
published_at 2026-06-11T12:55:00Z
2
value 0.30773
scoring_system epss
scoring_elements 0.96854
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-3169
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7668
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7668
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1463197
reference_id 1463197
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1463197
8
reference_url https://security.archlinux.org/ASA-201706-34
reference_id ASA-201706-34
reference_type
scores
url https://security.archlinux.org/ASA-201706-34
9
reference_url https://security.archlinux.org/AVG-316
reference_id AVG-316
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-316
10
reference_url https://httpd.apache.org/security/json/CVE-2017-3169.json
reference_id CVE-2017-3169
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2017-3169.json
11
reference_url https://security.gentoo.org/glsa/201710-32
reference_id GLSA-201710-32
reference_type
scores
url https://security.gentoo.org/glsa/201710-32
12
reference_url https://access.redhat.com/errata/RHSA-2017:2478
reference_id RHSA-2017:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2478
13
reference_url https://access.redhat.com/errata/RHSA-2017:2479
reference_id RHSA-2017:2479
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2479
14
reference_url https://access.redhat.com/errata/RHSA-2017:2483
reference_id RHSA-2017:2483
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2483
15
reference_url https://access.redhat.com/errata/RHSA-2017:3193
reference_id RHSA-2017:3193
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3193
16
reference_url https://access.redhat.com/errata/RHSA-2017:3194
reference_id RHSA-2017:3194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3194
17
reference_url https://access.redhat.com/errata/RHSA-2017:3195
reference_id RHSA-2017:3195
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3195
18
reference_url https://access.redhat.com/errata/RHSA-2017:3475
reference_id RHSA-2017:3475
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3475
19
reference_url https://access.redhat.com/errata/RHSA-2017:3476
reference_id RHSA-2017:3476
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3476
20
reference_url https://access.redhat.com/errata/RHSA-2017:3477
reference_id RHSA-2017:3477
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3477
21
reference_url https://usn.ubuntu.com/3340-1/
reference_id USN-3340-1
reference_type
scores
url https://usn.ubuntu.com/3340-1/
22
reference_url https://usn.ubuntu.com/3373-1/
reference_id USN-3373-1
reference_type
scores
url https://usn.ubuntu.com/3373-1/
fixed_packages
0
url pkg:apache/httpd@2.2.34
purl pkg:apache/httpd@2.2.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-grnf-r71w-r3h7
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.34
1
url pkg:apache/httpd@2.4.26
purl pkg:apache/httpd@2.4.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7xcn-c8p4-j7ec
5
vulnerability VCID-8vas-wy6r-pkda
6
vulnerability VCID-9e8m-yzr3-pbgz
7
vulnerability VCID-9wx3-62cp-fuh8
8
vulnerability VCID-afat-n93z-8qeq
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-dk12-s4wp-suhc
11
vulnerability VCID-e4mk-ydp9-m3bx
12
vulnerability VCID-ea8s-ercf-qfdx
13
vulnerability VCID-ern3-8585-c7hn
14
vulnerability VCID-gqvc-a75w-dqej
15
vulnerability VCID-grnf-r71w-r3h7
16
vulnerability VCID-h959-hrhy-wkep
17
vulnerability VCID-kp2b-t25c-sqfc
18
vulnerability VCID-mzxz-ujfq-qucw
19
vulnerability VCID-n8qk-qws2-9ydv
20
vulnerability VCID-pr6s-p29g-k3hv
21
vulnerability VCID-qw6u-prup-eqar
22
vulnerability VCID-rb9f-qwwr-v7c2
23
vulnerability VCID-rc99-4efu-tud2
24
vulnerability VCID-t95h-sdy4-tua1
25
vulnerability VCID-taua-zv9g-7kck
26
vulnerability VCID-tdub-a3cg-r7fg
27
vulnerability VCID-usz9-qezx-9ybx
28
vulnerability VCID-wf33-hszj-akf9
29
vulnerability VCID-xj85-t7py-93cf
30
vulnerability VCID-y5k7-ve1j-3bfc
31
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.26
aliases CVE-2017-3169
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nxqt-4e79-w3et
42
url VCID-p9db-n3kt-puhp
vulnerability_id VCID-p9db-n3kt-puhp
summary mod_rewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1862.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1862.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1862
reference_id
reference_type
scores
0
value 0.52396
scoring_system epss
scoring_elements 0.97988
published_at 2026-06-11T12:55:00Z
1
value 0.52396
scoring_system epss
scoring_elements 0.97995
published_at 2026-06-12T12:55:00Z
2
value 0.52396
scoring_system epss
scoring_elements 0.97996
published_at 2026-06-13T12:55:00Z
3
value 0.52396
scoring_system epss
scoring_elements 0.97997
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1862
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1862
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1862
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=953729
reference_id 953729
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=953729
4
reference_url https://httpd.apache.org/security/json/CVE-2013-1862.json
reference_id CVE-2013-1862
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2013-1862.json
5
reference_url https://security.gentoo.org/glsa/201309-12
reference_id GLSA-201309-12
reference_type
scores
url https://security.gentoo.org/glsa/201309-12
6
reference_url https://access.redhat.com/errata/RHSA-2013:0815
reference_id RHSA-2013:0815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0815
7
reference_url https://access.redhat.com/errata/RHSA-2013:1133
reference_id RHSA-2013:1133
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1133
8
reference_url https://access.redhat.com/errata/RHSA-2013:1134
reference_id RHSA-2013:1134
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1134
9
reference_url https://access.redhat.com/errata/RHSA-2013:1207
reference_id RHSA-2013:1207
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1207
10
reference_url https://access.redhat.com/errata/RHSA-2013:1208
reference_id RHSA-2013:1208
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1208
11
reference_url https://access.redhat.com/errata/RHSA-2013:1209
reference_id RHSA-2013:1209
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1209
12
reference_url https://usn.ubuntu.com/1903-1/
reference_id USN-1903-1
reference_type
scores
url https://usn.ubuntu.com/1903-1/
fixed_packages
0
url pkg:apache/httpd@2.2.25
purl pkg:apache/httpd@2.2.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u4s-a96g-v3aq
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-8vkp-k5yr-n3bn
3
vulnerability VCID-9nuk-vm33-kkha
4
vulnerability VCID-dj7a-88wd-dugh
5
vulnerability VCID-e4mk-ydp9-m3bx
6
vulnerability VCID-epgm-u9j7-7bd1
7
vulnerability VCID-grnf-r71w-r3h7
8
vulnerability VCID-kg8r-vq3s-2qa4
9
vulnerability VCID-nxqt-4e79-w3et
10
vulnerability VCID-rj9n-s2a4-w7he
11
vulnerability VCID-sfx1-4tej-gqgs
12
vulnerability VCID-uhmn-527n-fqgq
13
vulnerability VCID-uhyk-pc9e-w7cu
14
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.25
aliases CVE-2013-1862
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p9db-n3kt-puhp
43
url VCID-pfc7-ap3y-u7ds
vulnerability_id VCID-pfc7-ap3y-u7ds
summary A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly accessible, a cross-site scripting attack is possible. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6388.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6388.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-6388
reference_id
reference_type
scores
0
value 0.84619
scoring_system epss
scoring_elements 0.99351
published_at 2026-06-11T12:55:00Z
1
value 0.84619
scoring_system epss
scoring_elements 0.99354
published_at 2026-06-14T12:55:00Z
2
value 0.84619
scoring_system epss
scoring_elements 0.99355
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-6388
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6388
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6388
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=427228
reference_id 427228
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=427228
4
reference_url https://httpd.apache.org/security/json/CVE-2007-6388.json
reference_id CVE-2007-6388
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-6388.json
5
reference_url https://access.redhat.com/errata/RHSA-2008:0004
reference_id RHSA-2008:0004
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0004
6
reference_url https://access.redhat.com/errata/RHSA-2008:0005
reference_id RHSA-2008:0005
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0005
7
reference_url https://access.redhat.com/errata/RHSA-2008:0006
reference_id RHSA-2008:0006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0006
8
reference_url https://access.redhat.com/errata/RHSA-2008:0007
reference_id RHSA-2008:0007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0007
9
reference_url https://access.redhat.com/errata/RHSA-2008:0008
reference_id RHSA-2008:0008
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0008
10
reference_url https://access.redhat.com/errata/RHSA-2008:0263
reference_id RHSA-2008:0263
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0263
11
reference_url https://access.redhat.com/errata/RHSA-2008:0523
reference_id RHSA-2008:0523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0523
12
reference_url https://usn.ubuntu.com/575-1/
reference_id USN-575-1
reference_type
scores
url https://usn.ubuntu.com/575-1/
fixed_packages
0
url pkg:apache/httpd@2.2.8
purl pkg:apache/httpd@2.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-awb7-8p6u-2fa3
18
vulnerability VCID-bg3g-yc4h-3bdu
19
vulnerability VCID-cbcf-d64d-8bd2
20
vulnerability VCID-cm2b-nhrm-mfdr
21
vulnerability VCID-dj7a-88wd-dugh
22
vulnerability VCID-dkh9-b39c-uqgz
23
vulnerability VCID-dr6d-j9as-qfby
24
vulnerability VCID-e4mk-ydp9-m3bx
25
vulnerability VCID-ehc1-xda2-8bb3
26
vulnerability VCID-epgm-u9j7-7bd1
27
vulnerability VCID-fsva-ef97-87hs
28
vulnerability VCID-fwbt-3uqc-sqf7
29
vulnerability VCID-grnf-r71w-r3h7
30
vulnerability VCID-h6qp-sn1h-byap
31
vulnerability VCID-hv8d-3r75-abfb
32
vulnerability VCID-kg8r-vq3s-2qa4
33
vulnerability VCID-m7y1-9mdy-6bfx
34
vulnerability VCID-ne55-gstx-1qfu
35
vulnerability VCID-nxqt-4e79-w3et
36
vulnerability VCID-p9db-n3kt-puhp
37
vulnerability VCID-rj9n-s2a4-w7he
38
vulnerability VCID-sfx1-4tej-gqgs
39
vulnerability VCID-szmq-1zrf-mfa6
40
vulnerability VCID-uhmn-527n-fqgq
41
vulnerability VCID-uhyk-pc9e-w7cu
42
vulnerability VCID-ukk2-3cpg-7ugy
43
vulnerability VCID-vu91-nh94-nkb2
44
vulnerability VCID-vy92-b4as-a7hp
45
vulnerability VCID-w4b1-tu6b-mkc7
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.8
aliases CVE-2007-6388
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pfc7-ap3y-u7ds
44
url VCID-rj9n-s2a4-w7he
vulnerability_id VCID-rj9n-s2a4-w7he
summary A flaw was found in mod_log_config. A remote attacker could send a specific truncated cookie causing a crash. This crash would only be a denial of service if using a threaded MPM.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0098.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0098.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0098
reference_id
reference_type
scores
0
value 0.50788
scoring_system epss
scoring_elements 0.97918
published_at 2026-06-11T12:55:00Z
1
value 0.50788
scoring_system epss
scoring_elements 0.97926
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0098
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1077871
reference_id 1077871
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1077871
4
reference_url https://httpd.apache.org/security/json/CVE-2014-0098.json
reference_id CVE-2014-0098
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2014-0098.json
5
reference_url https://security.gentoo.org/glsa/201408-12
reference_id GLSA-201408-12
reference_type
scores
url https://security.gentoo.org/glsa/201408-12
6
reference_url https://access.redhat.com/errata/RHSA-2014:0369
reference_id RHSA-2014:0369
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0369
7
reference_url https://access.redhat.com/errata/RHSA-2014:0370
reference_id RHSA-2014:0370
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0370
8
reference_url https://access.redhat.com/errata/RHSA-2014:0783
reference_id RHSA-2014:0783
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0783
9
reference_url https://access.redhat.com/errata/RHSA-2014:0784
reference_id RHSA-2014:0784
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0784
10
reference_url https://access.redhat.com/errata/RHSA-2014:0825
reference_id RHSA-2014:0825
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0825
11
reference_url https://access.redhat.com/errata/RHSA-2014:0826
reference_id RHSA-2014:0826
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0826
12
reference_url https://usn.ubuntu.com/2152-1/
reference_id USN-2152-1
reference_type
scores
url https://usn.ubuntu.com/2152-1/
fixed_packages
0
url pkg:apache/httpd@2.2.27
purl pkg:apache/httpd@2.2.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u4s-a96g-v3aq
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-8vkp-k5yr-n3bn
3
vulnerability VCID-9nuk-vm33-kkha
4
vulnerability VCID-dj7a-88wd-dugh
5
vulnerability VCID-e4mk-ydp9-m3bx
6
vulnerability VCID-epgm-u9j7-7bd1
7
vulnerability VCID-grnf-r71w-r3h7
8
vulnerability VCID-kg8r-vq3s-2qa4
9
vulnerability VCID-nxqt-4e79-w3et
10
vulnerability VCID-sfx1-4tej-gqgs
11
vulnerability VCID-uhyk-pc9e-w7cu
12
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.27
1
url pkg:apache/httpd@2.4.9
purl pkg:apache/httpd@2.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9nuk-vm33-kkha
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-arm8-rmce-2bec
11
vulnerability VCID-bn5d-te6p-hyf1
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-dk12-s4wp-suhc
14
vulnerability VCID-dr2b-7ack-wbfp
15
vulnerability VCID-e4mk-ydp9-m3bx
16
vulnerability VCID-epgm-u9j7-7bd1
17
vulnerability VCID-f1cy-ycsy-qqhc
18
vulnerability VCID-grnf-r71w-r3h7
19
vulnerability VCID-gs9y-327e-s7d3
20
vulnerability VCID-h959-hrhy-wkep
21
vulnerability VCID-kg8r-vq3s-2qa4
22
vulnerability VCID-kp2b-t25c-sqfc
23
vulnerability VCID-n82t-1jhq-8ba3
24
vulnerability VCID-n8qk-qws2-9ydv
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-pc8m-gm5b-gya1
27
vulnerability VCID-qjxt-ekff-ykgk
28
vulnerability VCID-r2fd-nfnk-h7gy
29
vulnerability VCID-rb9f-qwwr-v7c2
30
vulnerability VCID-rc99-4efu-tud2
31
vulnerability VCID-sfx1-4tej-gqgs
32
vulnerability VCID-t95h-sdy4-tua1
33
vulnerability VCID-tdub-a3cg-r7fg
34
vulnerability VCID-uhyk-pc9e-w7cu
35
vulnerability VCID-usz9-qezx-9ybx
36
vulnerability VCID-wf33-hszj-akf9
37
vulnerability VCID-xmt2-8ett-qbgx
38
vulnerability VCID-y5k7-ve1j-3bfc
39
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.9
aliases CVE-2014-0098
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rj9n-s2a4-w7he
45
url VCID-sfx1-4tej-gqgs
vulnerability_id VCID-sfx1-4tej-gqgs
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8743.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8743.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8743
reference_id
reference_type
scores
0
value 0.0978
scoring_system epss
scoring_elements 0.9313
published_at 2026-06-11T12:55:00Z
1
value 0.0978
scoring_system epss
scoring_elements 0.93153
published_at 2026-06-14T12:55:00Z
2
value 0.0978
scoring_system epss
scoring_elements 0.93154
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8743
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0736
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0736
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2161
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2161
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406822
reference_id 1406822
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406822
7
reference_url https://httpd.apache.org/security/json/CVE-2016-8743.json
reference_id CVE-2016-8743
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2016-8743.json
8
reference_url https://security.gentoo.org/glsa/201701-36
reference_id GLSA-201701-36
reference_type
scores
url https://security.gentoo.org/glsa/201701-36
9
reference_url https://access.redhat.com/errata/RHSA-2017:0906
reference_id RHSA-2017:0906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0906
10
reference_url https://access.redhat.com/errata/RHSA-2017:1161
reference_id RHSA-2017:1161
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1161
11
reference_url https://access.redhat.com/errata/RHSA-2017:1413
reference_id RHSA-2017:1413
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1413
12
reference_url https://access.redhat.com/errata/RHSA-2017:1414
reference_id RHSA-2017:1414
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1414
13
reference_url https://access.redhat.com/errata/RHSA-2017:1415
reference_id RHSA-2017:1415
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1415
14
reference_url https://access.redhat.com/errata/RHSA-2017:1721
reference_id RHSA-2017:1721
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1721
15
reference_url https://usn.ubuntu.com/3279-1/
reference_id USN-3279-1
reference_type
scores
url https://usn.ubuntu.com/3279-1/
16
reference_url https://usn.ubuntu.com/3373-1/
reference_id USN-3373-1
reference_type
scores
url https://usn.ubuntu.com/3373-1/
fixed_packages
0
url pkg:apache/httpd@2.2.32
purl pkg:apache/httpd@2.2.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44ma-b8wt-67fa
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-grnf-r71w-r3h7
4
vulnerability VCID-nxqt-4e79-w3et
5
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.32
1
url pkg:apache/httpd@2.4.25
purl pkg:apache/httpd@2.4.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-44ma-b8wt-67fa
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7xcn-c8p4-j7ec
7
vulnerability VCID-8vas-wy6r-pkda
8
vulnerability VCID-9e8m-yzr3-pbgz
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-afat-n93z-8qeq
11
vulnerability VCID-arm8-rmce-2bec
12
vulnerability VCID-dk12-s4wp-suhc
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-ea8s-ercf-qfdx
15
vulnerability VCID-gqvc-a75w-dqej
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kp2b-t25c-sqfc
19
vulnerability VCID-mzxz-ujfq-qucw
20
vulnerability VCID-n8qk-qws2-9ydv
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-pr6s-p29g-k3hv
23
vulnerability VCID-qw6u-prup-eqar
24
vulnerability VCID-rb9f-qwwr-v7c2
25
vulnerability VCID-rc99-4efu-tud2
26
vulnerability VCID-t95h-sdy4-tua1
27
vulnerability VCID-taua-zv9g-7kck
28
vulnerability VCID-tdub-a3cg-r7fg
29
vulnerability VCID-uhyk-pc9e-w7cu
30
vulnerability VCID-usz9-qezx-9ybx
31
vulnerability VCID-wf33-hszj-akf9
32
vulnerability VCID-x7bx-d6tn-fbhf
33
vulnerability VCID-xj85-t7py-93cf
34
vulnerability VCID-y5k7-ve1j-3bfc
35
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.25
aliases CVE-2016-8743
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sfx1-4tej-gqgs
46
url VCID-szmq-1zrf-mfa6
vulnerability_id VCID-szmq-1zrf-mfa6
summary 
An exposure was found when using mod_proxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or ProxyPassMatch, a remote attacker could cause the reverse proxy to connect to an arbitrary server, possibly disclosing sensitive information from internal web servers not directly accessible to attacker. No update of 1.3 will be released.
Patches will be published to https://archive.apache.org/dist/httpd/patches/apply_to_1.3.42/
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3368.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3368.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3368
reference_id
reference_type
scores
0
value 0.72537
scoring_system epss
scoring_elements 0.98793
published_at 2026-06-13T12:55:00Z
1
value 0.74448
scoring_system epss
scoring_elements 0.98873
published_at 2026-06-14T12:55:00Z
2
value 0.76893
scoring_system epss
scoring_elements 0.9898
published_at 2026-06-11T12:55:00Z
3
value 0.76893
scoring_system epss
scoring_elements 0.98983
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3368
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=740045
reference_id 740045
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=740045
4
reference_url https://httpd.apache.org/security/json/CVE-2011-3368.json
reference_id CVE-2011-3368
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2011-3368.json
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/17969.py
reference_id CVE-2011-3368;OSVDB-76079
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/17969.py
6
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
7
reference_url https://access.redhat.com/errata/RHSA-2011:1391
reference_id RHSA-2011:1391
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1391
8
reference_url https://access.redhat.com/errata/RHSA-2011:1392
reference_id RHSA-2011:1392
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1392
9
reference_url https://access.redhat.com/errata/RHSA-2012:0542
reference_id RHSA-2012:0542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0542
10
reference_url https://access.redhat.com/errata/RHSA-2012:0543
reference_id RHSA-2012:0543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0543
11
reference_url https://usn.ubuntu.com/1259-1/
reference_id USN-1259-1
reference_type
scores
url https://usn.ubuntu.com/1259-1/
fixed_packages
0
url pkg:apache/httpd@2.2.22
purl pkg:apache/httpd@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-6fav-yrx7-r7ar
3
vulnerability VCID-7j9j-sxt1-6qa6
4
vulnerability VCID-7x6x-s2w3-xygz
5
vulnerability VCID-8qcw-mekw-buh6
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9nuk-vm33-kkha
8
vulnerability VCID-cm2b-nhrm-mfdr
9
vulnerability VCID-dj7a-88wd-dugh
10
vulnerability VCID-e4mk-ydp9-m3bx
11
vulnerability VCID-epgm-u9j7-7bd1
12
vulnerability VCID-grnf-r71w-r3h7
13
vulnerability VCID-kg8r-vq3s-2qa4
14
vulnerability VCID-nxqt-4e79-w3et
15
vulnerability VCID-p9db-n3kt-puhp
16
vulnerability VCID-rj9n-s2a4-w7he
17
vulnerability VCID-sfx1-4tej-gqgs
18
vulnerability VCID-uhmn-527n-fqgq
19
vulnerability VCID-uhyk-pc9e-w7cu
20
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.22
aliases CVE-2011-3368
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-szmq-1zrf-mfa6
47
url VCID-uhmn-527n-fqgq
vulnerability_id VCID-uhmn-527n-fqgq
summary XML parsing code in mod_dav incorrectly calculates the end of the string when removing leading spaces and places a NUL character outside the buffer, causing random crashes. This XML parsing code is only used with DAV provider modules that support DeltaV, of which the only publicly released provider is mod_dav_svn.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6438.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6438.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-6438
reference_id
reference_type
scores
0
value 0.39561
scoring_system epss
scoring_elements 0.97399
published_at 2026-06-11T12:55:00Z
1
value 0.39561
scoring_system epss
scoring_elements 0.97407
published_at 2026-06-12T12:55:00Z
2
value 0.39561
scoring_system epss
scoring_elements 0.97409
published_at 2026-06-13T12:55:00Z
3
value 0.39561
scoring_system epss
scoring_elements 0.9741
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-6438
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1077867
reference_id 1077867
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1077867
4
reference_url https://httpd.apache.org/security/json/CVE-2013-6438.json
reference_id CVE-2013-6438
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2013-6438.json
5
reference_url https://security.gentoo.org/glsa/201408-12
reference_id GLSA-201408-12
reference_type
scores
url https://security.gentoo.org/glsa/201408-12
6
reference_url https://access.redhat.com/errata/RHSA-2014:0369
reference_id RHSA-2014:0369
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0369
7
reference_url https://access.redhat.com/errata/RHSA-2014:0370
reference_id RHSA-2014:0370
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0370
8
reference_url https://access.redhat.com/errata/RHSA-2014:0783
reference_id RHSA-2014:0783
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0783
9
reference_url https://access.redhat.com/errata/RHSA-2014:0784
reference_id RHSA-2014:0784
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0784
10
reference_url https://access.redhat.com/errata/RHSA-2014:0825
reference_id RHSA-2014:0825
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0825
11
reference_url https://access.redhat.com/errata/RHSA-2014:0826
reference_id RHSA-2014:0826
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0826
12
reference_url https://usn.ubuntu.com/2152-1/
reference_id USN-2152-1
reference_type
scores
url https://usn.ubuntu.com/2152-1/
fixed_packages
0
url pkg:apache/httpd@2.2.27
purl pkg:apache/httpd@2.2.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u4s-a96g-v3aq
1
vulnerability VCID-7j9j-sxt1-6qa6
2
vulnerability VCID-8vkp-k5yr-n3bn
3
vulnerability VCID-9nuk-vm33-kkha
4
vulnerability VCID-dj7a-88wd-dugh
5
vulnerability VCID-e4mk-ydp9-m3bx
6
vulnerability VCID-epgm-u9j7-7bd1
7
vulnerability VCID-grnf-r71w-r3h7
8
vulnerability VCID-kg8r-vq3s-2qa4
9
vulnerability VCID-nxqt-4e79-w3et
10
vulnerability VCID-sfx1-4tej-gqgs
11
vulnerability VCID-uhyk-pc9e-w7cu
12
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.27
1
url pkg:apache/httpd@2.4.9
purl pkg:apache/httpd@2.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9nuk-vm33-kkha
9
vulnerability VCID-9wx3-62cp-fuh8
10
vulnerability VCID-arm8-rmce-2bec
11
vulnerability VCID-bn5d-te6p-hyf1
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-dk12-s4wp-suhc
14
vulnerability VCID-dr2b-7ack-wbfp
15
vulnerability VCID-e4mk-ydp9-m3bx
16
vulnerability VCID-epgm-u9j7-7bd1
17
vulnerability VCID-f1cy-ycsy-qqhc
18
vulnerability VCID-grnf-r71w-r3h7
19
vulnerability VCID-gs9y-327e-s7d3
20
vulnerability VCID-h959-hrhy-wkep
21
vulnerability VCID-kg8r-vq3s-2qa4
22
vulnerability VCID-kp2b-t25c-sqfc
23
vulnerability VCID-n82t-1jhq-8ba3
24
vulnerability VCID-n8qk-qws2-9ydv
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-pc8m-gm5b-gya1
27
vulnerability VCID-qjxt-ekff-ykgk
28
vulnerability VCID-r2fd-nfnk-h7gy
29
vulnerability VCID-rb9f-qwwr-v7c2
30
vulnerability VCID-rc99-4efu-tud2
31
vulnerability VCID-sfx1-4tej-gqgs
32
vulnerability VCID-t95h-sdy4-tua1
33
vulnerability VCID-tdub-a3cg-r7fg
34
vulnerability VCID-uhyk-pc9e-w7cu
35
vulnerability VCID-usz9-qezx-9ybx
36
vulnerability VCID-wf33-hszj-akf9
37
vulnerability VCID-xmt2-8ett-qbgx
38
vulnerability VCID-y5k7-ve1j-3bfc
39
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.9
aliases CVE-2013-6438
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uhmn-527n-fqgq
48
url VCID-uhyk-pc9e-w7cu
vulnerability_id VCID-uhyk-pc9e-w7cu
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7679.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7679.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7679
reference_id
reference_type
scores
0
value 0.30062
scoring_system epss
scoring_elements 0.9679
published_at 2026-06-14T12:55:00Z
1
value 0.30062
scoring_system epss
scoring_elements 0.96777
published_at 2026-06-11T12:55:00Z
2
value 0.30062
scoring_system epss
scoring_elements 0.96788
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7679
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7668
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7668
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1463207
reference_id 1463207
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1463207
8
reference_url https://security.archlinux.org/ASA-201706-34
reference_id ASA-201706-34
reference_type
scores
url https://security.archlinux.org/ASA-201706-34
9
reference_url https://security.archlinux.org/AVG-316
reference_id AVG-316
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-316
10
reference_url https://httpd.apache.org/security/json/CVE-2017-7679.json
reference_id CVE-2017-7679
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2017-7679.json
11
reference_url https://security.gentoo.org/glsa/201710-32
reference_id GLSA-201710-32
reference_type
scores
url https://security.gentoo.org/glsa/201710-32
12
reference_url https://access.redhat.com/errata/RHSA-2017:2478
reference_id RHSA-2017:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2478
13
reference_url https://access.redhat.com/errata/RHSA-2017:2479
reference_id RHSA-2017:2479
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2479
14
reference_url https://access.redhat.com/errata/RHSA-2017:2483
reference_id RHSA-2017:2483
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2483
15
reference_url https://access.redhat.com/errata/RHSA-2017:3193
reference_id RHSA-2017:3193
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3193
16
reference_url https://access.redhat.com/errata/RHSA-2017:3194
reference_id RHSA-2017:3194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3194
17
reference_url https://access.redhat.com/errata/RHSA-2017:3195
reference_id RHSA-2017:3195
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3195
18
reference_url https://access.redhat.com/errata/RHSA-2017:3475
reference_id RHSA-2017:3475
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3475
19
reference_url https://access.redhat.com/errata/RHSA-2017:3476
reference_id RHSA-2017:3476
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3476
20
reference_url https://access.redhat.com/errata/RHSA-2017:3477
reference_id RHSA-2017:3477
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3477
21
reference_url https://usn.ubuntu.com/3340-1/
reference_id USN-3340-1
reference_type
scores
url https://usn.ubuntu.com/3340-1/
22
reference_url https://usn.ubuntu.com/3373-1/
reference_id USN-3373-1
reference_type
scores
url https://usn.ubuntu.com/3373-1/
fixed_packages
0
url pkg:apache/httpd@2.2.34
purl pkg:apache/httpd@2.2.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-grnf-r71w-r3h7
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.34
1
url pkg:apache/httpd@2.4.26
purl pkg:apache/httpd@2.4.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38r6-mbzq-e7gd
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3dvk-8he7-xbck
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7xcn-c8p4-j7ec
5
vulnerability VCID-8vas-wy6r-pkda
6
vulnerability VCID-9e8m-yzr3-pbgz
7
vulnerability VCID-9wx3-62cp-fuh8
8
vulnerability VCID-afat-n93z-8qeq
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-dk12-s4wp-suhc
11
vulnerability VCID-e4mk-ydp9-m3bx
12
vulnerability VCID-ea8s-ercf-qfdx
13
vulnerability VCID-ern3-8585-c7hn
14
vulnerability VCID-gqvc-a75w-dqej
15
vulnerability VCID-grnf-r71w-r3h7
16
vulnerability VCID-h959-hrhy-wkep
17
vulnerability VCID-kp2b-t25c-sqfc
18
vulnerability VCID-mzxz-ujfq-qucw
19
vulnerability VCID-n8qk-qws2-9ydv
20
vulnerability VCID-pr6s-p29g-k3hv
21
vulnerability VCID-qw6u-prup-eqar
22
vulnerability VCID-rb9f-qwwr-v7c2
23
vulnerability VCID-rc99-4efu-tud2
24
vulnerability VCID-t95h-sdy4-tua1
25
vulnerability VCID-taua-zv9g-7kck
26
vulnerability VCID-tdub-a3cg-r7fg
27
vulnerability VCID-usz9-qezx-9ybx
28
vulnerability VCID-wf33-hszj-akf9
29
vulnerability VCID-xj85-t7py-93cf
30
vulnerability VCID-y5k7-ve1j-3bfc
31
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.26
aliases CVE-2017-7679
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uhyk-pc9e-w7cu
49
url VCID-ukk2-3cpg-7ugy
vulnerability_id VCID-ukk2-3cpg-7ugy
summary A heap-based underwrite flaw was found in the way the bundled copy of the APR-util library created compiled forms of particular search patterns. An attacker could formulate a specially-crafted search keyword, that would overwrite arbitrary heap memory locations when processed by the pattern preparation engine.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-0023
reference_id
reference_type
scores
0
value 0.11454
scoring_system epss
scoring_elements 0.93788
published_at 2026-06-13T12:55:00Z
1
value 0.11454
scoring_system epss
scoring_elements 0.9379
published_at 2026-06-14T12:55:00Z
2
value 0.14793
scoring_system epss
scoring_elements 0.94657
published_at 2026-06-11T12:55:00Z
3
value 0.14793
scoring_system epss
scoring_elements 0.94675
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-0023
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=503928
reference_id 503928
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=503928
4
reference_url https://httpd.apache.org/security/json/CVE-2009-0023.json
reference_id CVE-2009-0023
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2009-0023.json
5
reference_url https://security.gentoo.org/glsa/200907-03
reference_id GLSA-200907-03
reference_type
scores
url https://security.gentoo.org/glsa/200907-03
6
reference_url https://access.redhat.com/errata/RHSA-2009:1107
reference_id RHSA-2009:1107
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1107
7
reference_url https://access.redhat.com/errata/RHSA-2009:1108
reference_id RHSA-2009:1108
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1108
8
reference_url https://access.redhat.com/errata/RHSA-2009:1160
reference_id RHSA-2009:1160
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1160
9
reference_url https://usn.ubuntu.com/786-1/
reference_id USN-786-1
reference_type
scores
url https://usn.ubuntu.com/786-1/
10
reference_url https://usn.ubuntu.com/787-1/
reference_id USN-787-1
reference_type
scores
url https://usn.ubuntu.com/787-1/
fixed_packages
0
url pkg:apache/httpd@2.2.12
purl pkg:apache/httpd@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-5384-9rhf-5yby
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j9j-sxt1-6qa6
10
vulnerability VCID-7x6x-s2w3-xygz
11
vulnerability VCID-8bk7-w7fd-8bfv
12
vulnerability VCID-8qcw-mekw-buh6
13
vulnerability VCID-8vkp-k5yr-n3bn
14
vulnerability VCID-9nuk-vm33-kkha
15
vulnerability VCID-awb7-8p6u-2fa3
16
vulnerability VCID-bg3g-yc4h-3bdu
17
vulnerability VCID-cbcf-d64d-8bd2
18
vulnerability VCID-cm2b-nhrm-mfdr
19
vulnerability VCID-dj7a-88wd-dugh
20
vulnerability VCID-dkh9-b39c-uqgz
21
vulnerability VCID-dr6d-j9as-qfby
22
vulnerability VCID-e4mk-ydp9-m3bx
23
vulnerability VCID-ehc1-xda2-8bb3
24
vulnerability VCID-epgm-u9j7-7bd1
25
vulnerability VCID-fwbt-3uqc-sqf7
26
vulnerability VCID-grnf-r71w-r3h7
27
vulnerability VCID-h6qp-sn1h-byap
28
vulnerability VCID-kg8r-vq3s-2qa4
29
vulnerability VCID-m4ps-cv5v-n7fr
30
vulnerability VCID-ne55-gstx-1qfu
31
vulnerability VCID-nxqt-4e79-w3et
32
vulnerability VCID-p9db-n3kt-puhp
33
vulnerability VCID-rj9n-s2a4-w7he
34
vulnerability VCID-sfx1-4tej-gqgs
35
vulnerability VCID-szmq-1zrf-mfa6
36
vulnerability VCID-uhmn-527n-fqgq
37
vulnerability VCID-uhyk-pc9e-w7cu
38
vulnerability VCID-vy92-b4as-a7hp
39
vulnerability VCID-xmt2-8ett-qbgx
40
vulnerability VCID-xn4w-pvu5-dyhb
41
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.12
aliases CVE-2009-0023
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ukk2-3cpg-7ugy
50
url VCID-vch8-nryx-rbea
vulnerability_id VCID-vch8-nryx-rbea
summary A bug was found in the mod_cache module. On sites where caching is enabled, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. This could lead to a denial of service if using a threaded Multi-Processing Module.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1863.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1863.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-1863
reference_id
reference_type
scores
0
value 0.27987
scoring_system epss
scoring_elements 0.96583
published_at 2026-06-11T12:55:00Z
1
value 0.27987
scoring_system epss
scoring_elements 0.96595
published_at 2026-06-13T12:55:00Z
2
value 0.27987
scoring_system epss
scoring_elements 0.96598
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-1863
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1863
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1863
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=244658
reference_id 244658
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=244658
4
reference_url https://httpd.apache.org/security/json/CVE-2007-1863.json
reference_id CVE-2007-1863
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-1863.json
5
reference_url https://security.gentoo.org/glsa/200711-06
reference_id GLSA-200711-06
reference_type
scores
url https://security.gentoo.org/glsa/200711-06
6
reference_url https://access.redhat.com/errata/RHSA-2007:0533
reference_id RHSA-2007:0533
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0533
7
reference_url https://access.redhat.com/errata/RHSA-2007:0534
reference_id RHSA-2007:0534
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0534
8
reference_url https://access.redhat.com/errata/RHSA-2007:0556
reference_id RHSA-2007:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0556
9
reference_url https://access.redhat.com/errata/RHSA-2007:0557
reference_id RHSA-2007:0557
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0557
10
reference_url https://usn.ubuntu.com/499-1/
reference_id USN-499-1
reference_type
scores
url https://usn.ubuntu.com/499-1/
fixed_packages
0
url pkg:apache/httpd@2.2.6
purl pkg:apache/httpd@2.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-9qsz-zr6r-z3c3
18
vulnerability VCID-awb7-8p6u-2fa3
19
vulnerability VCID-bame-16es-e7a2
20
vulnerability VCID-bg3g-yc4h-3bdu
21
vulnerability VCID-cbcf-d64d-8bd2
22
vulnerability VCID-cm2b-nhrm-mfdr
23
vulnerability VCID-dj7a-88wd-dugh
24
vulnerability VCID-dkh9-b39c-uqgz
25
vulnerability VCID-dr6d-j9as-qfby
26
vulnerability VCID-e4mk-ydp9-m3bx
27
vulnerability VCID-ehc1-xda2-8bb3
28
vulnerability VCID-epgm-u9j7-7bd1
29
vulnerability VCID-fsva-ef97-87hs
30
vulnerability VCID-fwbt-3uqc-sqf7
31
vulnerability VCID-g655-us3x-37c2
32
vulnerability VCID-grnf-r71w-r3h7
33
vulnerability VCID-h6qp-sn1h-byap
34
vulnerability VCID-hv8d-3r75-abfb
35
vulnerability VCID-kg8r-vq3s-2qa4
36
vulnerability VCID-m7y1-9mdy-6bfx
37
vulnerability VCID-n9f3-w699-97fe
38
vulnerability VCID-ne55-gstx-1qfu
39
vulnerability VCID-nxqt-4e79-w3et
40
vulnerability VCID-p9db-n3kt-puhp
41
vulnerability VCID-pfc7-ap3y-u7ds
42
vulnerability VCID-rj9n-s2a4-w7he
43
vulnerability VCID-sfx1-4tej-gqgs
44
vulnerability VCID-szmq-1zrf-mfa6
45
vulnerability VCID-uhmn-527n-fqgq
46
vulnerability VCID-uhyk-pc9e-w7cu
47
vulnerability VCID-ukk2-3cpg-7ugy
48
vulnerability VCID-vu91-nh94-nkb2
49
vulnerability VCID-vy92-b4as-a7hp
50
vulnerability VCID-w4b1-tu6b-mkc7
51
vulnerability VCID-xmt2-8ett-qbgx
52
vulnerability VCID-xn4w-pvu5-dyhb
53
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.6
aliases CVE-2007-1863
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vch8-nryx-rbea
51
url VCID-vu91-nh94-nkb2
vulnerability_id VCID-vu91-nh94-nkb2
summary A flaw was found in the handling of wildcards in the path of a FTP URL with mod_proxy_ftp. If mod_proxy_ftp is enabled to support FTP-over-HTTP, requests containing globbing characters could lead to cross-site scripting (XSS) attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2939.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2939.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-2939
reference_id
reference_type
scores
0
value 0.6456
scoring_system epss
scoring_elements 0.98478
published_at 2026-06-11T12:55:00Z
1
value 0.6456
scoring_system epss
scoring_elements 0.98483
published_at 2026-06-14T12:55:00Z
2
value 0.6456
scoring_system epss
scoring_elements 0.98484
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-2939
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=458250
reference_id 458250
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=458250
4
reference_url https://httpd.apache.org/security/json/CVE-2008-2939.json
reference_id CVE-2008-2939
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2008-2939.json
5
reference_url https://access.redhat.com/errata/RHSA-2008:0967
reference_id RHSA-2008:0967
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0967
6
reference_url https://usn.ubuntu.com/731-1/
reference_id USN-731-1
reference_type
scores
url https://usn.ubuntu.com/731-1/
fixed_packages
0
url pkg:apache/httpd@2.2.10
purl pkg:apache/httpd@2.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-4zr3-hrfp-ekeh
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-6bsk-g6yj-2khy
7
vulnerability VCID-6fav-yrx7-r7ar
8
vulnerability VCID-6x9n-8arm-3kbk
9
vulnerability VCID-7j8b-zqfh-byd8
10
vulnerability VCID-7j9j-sxt1-6qa6
11
vulnerability VCID-7x6x-s2w3-xygz
12
vulnerability VCID-8bk7-w7fd-8bfv
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-awb7-8p6u-2fa3
18
vulnerability VCID-bg3g-yc4h-3bdu
19
vulnerability VCID-cbcf-d64d-8bd2
20
vulnerability VCID-cm2b-nhrm-mfdr
21
vulnerability VCID-dj7a-88wd-dugh
22
vulnerability VCID-dkh9-b39c-uqgz
23
vulnerability VCID-dr6d-j9as-qfby
24
vulnerability VCID-e4mk-ydp9-m3bx
25
vulnerability VCID-ehc1-xda2-8bb3
26
vulnerability VCID-epgm-u9j7-7bd1
27
vulnerability VCID-fsva-ef97-87hs
28
vulnerability VCID-fwbt-3uqc-sqf7
29
vulnerability VCID-grnf-r71w-r3h7
30
vulnerability VCID-h6qp-sn1h-byap
31
vulnerability VCID-hv8d-3r75-abfb
32
vulnerability VCID-kg8r-vq3s-2qa4
33
vulnerability VCID-m7y1-9mdy-6bfx
34
vulnerability VCID-ne55-gstx-1qfu
35
vulnerability VCID-nxqt-4e79-w3et
36
vulnerability VCID-p9db-n3kt-puhp
37
vulnerability VCID-rj9n-s2a4-w7he
38
vulnerability VCID-sfx1-4tej-gqgs
39
vulnerability VCID-szmq-1zrf-mfa6
40
vulnerability VCID-uhmn-527n-fqgq
41
vulnerability VCID-uhyk-pc9e-w7cu
42
vulnerability VCID-ukk2-3cpg-7ugy
43
vulnerability VCID-vy92-b4as-a7hp
44
vulnerability VCID-xmt2-8ett-qbgx
45
vulnerability VCID-xn4w-pvu5-dyhb
46
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.10
aliases CVE-2008-2939
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vu91-nh94-nkb2
52
url VCID-vy92-b4as-a7hp
vulnerability_id VCID-vy92-b4as-a7hp
summary mod_proxy_ajp would return the wrong status code if it encountered an error, causing a backend server to be put into an error state until the retry timeout expired. A remote attacker could send malicious requests to trigger this issue, resulting in denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0408.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0408.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-0408
reference_id
reference_type
scores
0
value 0.32487
scoring_system epss
scoring_elements 0.96972
published_at 2026-06-11T12:55:00Z
1
value 0.32487
scoring_system epss
scoring_elements 0.96982
published_at 2026-06-12T12:55:00Z
2
value 0.32487
scoring_system epss
scoring_elements 0.96984
published_at 2026-06-13T12:55:00Z
3
value 0.32487
scoring_system epss
scoring_elements 0.96985
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-0408
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=569905
reference_id 569905
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=569905
4
reference_url https://httpd.apache.org/security/json/CVE-2010-0408.json
reference_id CVE-2010-0408
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2010-0408.json
5
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
6
reference_url https://access.redhat.com/errata/RHSA-2010:0168
reference_id RHSA-2010:0168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0168
7
reference_url https://access.redhat.com/errata/RHSA-2010:0396
reference_id RHSA-2010:0396
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0396
8
reference_url https://usn.ubuntu.com/908-1/
reference_id USN-908-1
reference_type
scores
url https://usn.ubuntu.com/908-1/
fixed_packages
0
url pkg:apache/httpd@2.2.15
purl pkg:apache/httpd@2.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2v5v-34s6-3fdk
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-5384-9rhf-5yby
4
vulnerability VCID-59v3-3ms3-9fg3
5
vulnerability VCID-6bsk-g6yj-2khy
6
vulnerability VCID-6fav-yrx7-r7ar
7
vulnerability VCID-7j9j-sxt1-6qa6
8
vulnerability VCID-7x6x-s2w3-xygz
9
vulnerability VCID-8bk7-w7fd-8bfv
10
vulnerability VCID-8qcw-mekw-buh6
11
vulnerability VCID-8vkp-k5yr-n3bn
12
vulnerability VCID-9nuk-vm33-kkha
13
vulnerability VCID-awb7-8p6u-2fa3
14
vulnerability VCID-bg3g-yc4h-3bdu
15
vulnerability VCID-cm2b-nhrm-mfdr
16
vulnerability VCID-dj7a-88wd-dugh
17
vulnerability VCID-dr6d-j9as-qfby
18
vulnerability VCID-e4mk-ydp9-m3bx
19
vulnerability VCID-epgm-u9j7-7bd1
20
vulnerability VCID-grnf-r71w-r3h7
21
vulnerability VCID-h6qp-sn1h-byap
22
vulnerability VCID-kg8r-vq3s-2qa4
23
vulnerability VCID-m4ps-cv5v-n7fr
24
vulnerability VCID-ne55-gstx-1qfu
25
vulnerability VCID-nxqt-4e79-w3et
26
vulnerability VCID-p9db-n3kt-puhp
27
vulnerability VCID-rj9n-s2a4-w7he
28
vulnerability VCID-sfx1-4tej-gqgs
29
vulnerability VCID-szmq-1zrf-mfa6
30
vulnerability VCID-uhmn-527n-fqgq
31
vulnerability VCID-uhyk-pc9e-w7cu
32
vulnerability VCID-xmt2-8ett-qbgx
33
vulnerability VCID-xn4w-pvu5-dyhb
34
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.15
aliases CVE-2010-0408
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vy92-b4as-a7hp
53
url VCID-w4b1-tu6b-mkc7
vulnerability_id VCID-w4b1-tu6b-mkc7
summary The mod_proxy_balancer provided an administrative interface that could be vulnerable to cross-site request forgery (CSRF) attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6420.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6420.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-6420
reference_id
reference_type
scores
0
value 0.05697
scoring_system epss
scoring_elements 0.90614
published_at 2026-06-11T12:55:00Z
1
value 0.05697
scoring_system epss
scoring_elements 0.90644
published_at 2026-06-12T12:55:00Z
2
value 0.05697
scoring_system epss
scoring_elements 0.90651
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-6420
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6420
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6420
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=471009
reference_id 471009
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=471009
4
reference_url https://httpd.apache.org/security/json/CVE-2007-6420.json
reference_id CVE-2007-6420
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-6420.json
5
reference_url https://security.gentoo.org/glsa/200807-06
reference_id GLSA-200807-06
reference_type
scores
url https://security.gentoo.org/glsa/200807-06
6
reference_url https://usn.ubuntu.com/731-1/
reference_id USN-731-1
reference_type
scores
url https://usn.ubuntu.com/731-1/
fixed_packages
0
url pkg:apache/httpd@2.2.9
purl pkg:apache/httpd@2.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-4zr3-hrfp-ekeh
5
vulnerability VCID-59v3-3ms3-9fg3
6
vulnerability VCID-5bxn-x6ky-s3az
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8bk7-w7fd-8bfv
14
vulnerability VCID-8qcw-mekw-buh6
15
vulnerability VCID-8vkp-k5yr-n3bn
16
vulnerability VCID-8zzs-cvkw-nubr
17
vulnerability VCID-9nuk-vm33-kkha
18
vulnerability VCID-awb7-8p6u-2fa3
19
vulnerability VCID-bg3g-yc4h-3bdu
20
vulnerability VCID-cbcf-d64d-8bd2
21
vulnerability VCID-cm2b-nhrm-mfdr
22
vulnerability VCID-dj7a-88wd-dugh
23
vulnerability VCID-dkh9-b39c-uqgz
24
vulnerability VCID-dr6d-j9as-qfby
25
vulnerability VCID-e4mk-ydp9-m3bx
26
vulnerability VCID-ehc1-xda2-8bb3
27
vulnerability VCID-epgm-u9j7-7bd1
28
vulnerability VCID-fsva-ef97-87hs
29
vulnerability VCID-fwbt-3uqc-sqf7
30
vulnerability VCID-grnf-r71w-r3h7
31
vulnerability VCID-h6qp-sn1h-byap
32
vulnerability VCID-hv8d-3r75-abfb
33
vulnerability VCID-kg8r-vq3s-2qa4
34
vulnerability VCID-m7y1-9mdy-6bfx
35
vulnerability VCID-ne55-gstx-1qfu
36
vulnerability VCID-nxqt-4e79-w3et
37
vulnerability VCID-p9db-n3kt-puhp
38
vulnerability VCID-rj9n-s2a4-w7he
39
vulnerability VCID-sfx1-4tej-gqgs
40
vulnerability VCID-szmq-1zrf-mfa6
41
vulnerability VCID-uhmn-527n-fqgq
42
vulnerability VCID-uhyk-pc9e-w7cu
43
vulnerability VCID-ukk2-3cpg-7ugy
44
vulnerability VCID-vu91-nh94-nkb2
45
vulnerability VCID-vy92-b4as-a7hp
46
vulnerability VCID-xmt2-8ett-qbgx
47
vulnerability VCID-xn4w-pvu5-dyhb
48
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.9
aliases CVE-2007-6420
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w4b1-tu6b-mkc7
54
url VCID-xmt2-8ett-qbgx
vulnerability_id VCID-xmt2-8ett-qbgx
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0118.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0118.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0118
reference_id
reference_type
scores
0
value 0.41327
scoring_system epss
scoring_elements 0.97492
published_at 2026-06-11T12:55:00Z
1
value 0.41327
scoring_system epss
scoring_elements 0.975
published_at 2026-06-12T12:55:00Z
2
value 0.41327
scoring_system epss
scoring_elements 0.97502
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0118
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1120601
reference_id 1120601
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1120601
6
reference_url https://httpd.apache.org/security/json/CVE-2014-0118.json
reference_id CVE-2014-0118
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2014-0118.json
7
reference_url https://security.gentoo.org/glsa/201504-03
reference_id GLSA-201504-03
reference_type
scores
url https://security.gentoo.org/glsa/201504-03
8
reference_url https://access.redhat.com/errata/RHSA-2014:0920
reference_id RHSA-2014:0920
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0920
9
reference_url https://access.redhat.com/errata/RHSA-2014:0921
reference_id RHSA-2014:0921
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0921
10
reference_url https://access.redhat.com/errata/RHSA-2014:0922
reference_id RHSA-2014:0922
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0922
11
reference_url https://access.redhat.com/errata/RHSA-2014:1019
reference_id RHSA-2014:1019
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1019
12
reference_url https://access.redhat.com/errata/RHSA-2014:1020
reference_id RHSA-2014:1020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1020
13
reference_url https://access.redhat.com/errata/RHSA-2014:1021
reference_id RHSA-2014:1021
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1021
14
reference_url https://access.redhat.com/errata/RHSA-2014:1086
reference_id RHSA-2014:1086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1086
15
reference_url https://access.redhat.com/errata/RHSA-2014:1087
reference_id RHSA-2014:1087
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1087
16
reference_url https://access.redhat.com/errata/RHSA-2014:1088
reference_id RHSA-2014:1088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1088
17
reference_url https://usn.ubuntu.com/2299-1/
reference_id USN-2299-1
reference_type
scores
url https://usn.ubuntu.com/2299-1/
fixed_packages
0
url pkg:apache/httpd@2.2.29
purl pkg:apache/httpd@2.2.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7j9j-sxt1-6qa6
1
vulnerability VCID-8vkp-k5yr-n3bn
2
vulnerability VCID-e4mk-ydp9-m3bx
3
vulnerability VCID-epgm-u9j7-7bd1
4
vulnerability VCID-grnf-r71w-r3h7
5
vulnerability VCID-kg8r-vq3s-2qa4
6
vulnerability VCID-nxqt-4e79-w3et
7
vulnerability VCID-sfx1-4tej-gqgs
8
vulnerability VCID-uhyk-pc9e-w7cu
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.29
1
url pkg:apache/httpd@2.4.10
purl pkg:apache/httpd@2.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2w8b-3gmt-qff7
1
vulnerability VCID-3dh3-8wr4-uqcd
2
vulnerability VCID-3u4s-a96g-v3aq
3
vulnerability VCID-43j2-q5rg-7qay
4
vulnerability VCID-7j9j-sxt1-6qa6
5
vulnerability VCID-7xcn-c8p4-j7ec
6
vulnerability VCID-8vkp-k5yr-n3bn
7
vulnerability VCID-9e8m-yzr3-pbgz
8
vulnerability VCID-9wx3-62cp-fuh8
9
vulnerability VCID-arm8-rmce-2bec
10
vulnerability VCID-bn5d-te6p-hyf1
11
vulnerability VCID-dk12-s4wp-suhc
12
vulnerability VCID-dr2b-7ack-wbfp
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-epgm-u9j7-7bd1
15
vulnerability VCID-f1cy-ycsy-qqhc
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h959-hrhy-wkep
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-kp2b-t25c-sqfc
20
vulnerability VCID-n82t-1jhq-8ba3
21
vulnerability VCID-n8qk-qws2-9ydv
22
vulnerability VCID-nxqt-4e79-w3et
23
vulnerability VCID-pc8m-gm5b-gya1
24
vulnerability VCID-qjxt-ekff-ykgk
25
vulnerability VCID-rb9f-qwwr-v7c2
26
vulnerability VCID-rc99-4efu-tud2
27
vulnerability VCID-sfx1-4tej-gqgs
28
vulnerability VCID-t95h-sdy4-tua1
29
vulnerability VCID-tdub-a3cg-r7fg
30
vulnerability VCID-uhyk-pc9e-w7cu
31
vulnerability VCID-usz9-qezx-9ybx
32
vulnerability VCID-uyz2-jck5-d7dd
33
vulnerability VCID-wf33-hszj-akf9
34
vulnerability VCID-y5k7-ve1j-3bfc
35
vulnerability VCID-y7cv-qzrr-rbhd
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.10
aliases CVE-2014-0118
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xmt2-8ett-qbgx
55
url VCID-xn4w-pvu5-dyhb
vulnerability_id VCID-xn4w-pvu5-dyhb
summary A flaw was found in the apr_brigade_split_line() function of the bundled APR-util library, used to process non-SSL requests. A remote attacker could send requests, carefully crafting the timing of individual bytes, which would slowly consume memory, potentially leading to a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-1623
reference_id
reference_type
scores
0
value 0.28285
scoring_system epss
scoring_elements 0.96613
published_at 2026-06-11T12:55:00Z
1
value 0.28285
scoring_system epss
scoring_elements 0.96624
published_at 2026-06-12T12:55:00Z
2
value 0.28285
scoring_system epss
scoring_elements 0.96625
published_at 2026-06-13T12:55:00Z
3
value 0.28285
scoring_system epss
scoring_elements 0.96627
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-1623
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=640281
reference_id 640281
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=640281
4
reference_url https://httpd.apache.org/security/json/CVE-2010-1623.json
reference_id CVE-2010-1623
reference_type
scores
0
value low
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2010-1623.json
5
reference_url https://security.gentoo.org/glsa/201405-24
reference_id GLSA-201405-24
reference_type
scores
url https://security.gentoo.org/glsa/201405-24
6
reference_url https://access.redhat.com/errata/RHSA-2010:0950
reference_id RHSA-2010:0950
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0950
7
reference_url https://usn.ubuntu.com/1021-1/
reference_id USN-1021-1
reference_type
scores
url https://usn.ubuntu.com/1021-1/
8
reference_url https://usn.ubuntu.com/1022-1/
reference_id USN-1022-1
reference_type
scores
url https://usn.ubuntu.com/1022-1/
fixed_packages
0
url pkg:apache/httpd@2.2.17
purl pkg:apache/httpd@2.2.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-5384-9rhf-5yby
3
vulnerability VCID-6bsk-g6yj-2khy
4
vulnerability VCID-6fav-yrx7-r7ar
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7x6x-s2w3-xygz
7
vulnerability VCID-8qcw-mekw-buh6
8
vulnerability VCID-8vkp-k5yr-n3bn
9
vulnerability VCID-9nuk-vm33-kkha
10
vulnerability VCID-bg3g-yc4h-3bdu
11
vulnerability VCID-cm2b-nhrm-mfdr
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-dr6d-j9as-qfby
14
vulnerability VCID-e4mk-ydp9-m3bx
15
vulnerability VCID-epgm-u9j7-7bd1
16
vulnerability VCID-grnf-r71w-r3h7
17
vulnerability VCID-h6qp-sn1h-byap
18
vulnerability VCID-kg8r-vq3s-2qa4
19
vulnerability VCID-m4ps-cv5v-n7fr
20
vulnerability VCID-ne55-gstx-1qfu
21
vulnerability VCID-nxqt-4e79-w3et
22
vulnerability VCID-p9db-n3kt-puhp
23
vulnerability VCID-rj9n-s2a4-w7he
24
vulnerability VCID-rxv4-mugn-akhf
25
vulnerability VCID-sfx1-4tej-gqgs
26
vulnerability VCID-szmq-1zrf-mfa6
27
vulnerability VCID-uhmn-527n-fqgq
28
vulnerability VCID-uhyk-pc9e-w7cu
29
vulnerability VCID-xmt2-8ett-qbgx
30
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.17
aliases CVE-2010-1623
risk_score 1.1
exploitability 0.5
weighted_severity 2.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xn4w-pvu5-dyhb
56
url VCID-yyjh-f7n6-e3eg
vulnerability_id VCID-yyjh-f7n6-e3eg
summary A flaw was found in the Apache HTTP Server mod_proxy module. On sites where a reverse proxy is configured, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. On sites where a forward proxy is configured, an attacker could cause a similar crash if a user could be persuaded to visit a malicious site using the proxy. This could lead to a denial of service if using a threaded Multi-Processing Module.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3847.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3847.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-3847
reference_id
reference_type
scores
0
value 0.23276
scoring_system epss
scoring_elements 0.96071
published_at 2026-06-11T12:55:00Z
1
value 0.23276
scoring_system epss
scoring_elements 0.96083
published_at 2026-06-12T12:55:00Z
2
value 0.23276
scoring_system epss
scoring_elements 0.96084
published_at 2026-06-13T12:55:00Z
3
value 0.23276
scoring_system epss
scoring_elements 0.96087
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-3847
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=250731
reference_id 250731
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=250731
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=441845
reference_id 441845
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=441845
5
reference_url https://httpd.apache.org/security/json/CVE-2007-3847.json
reference_id CVE-2007-3847
reference_type
scores
0
value moderate
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2007-3847.json
6
reference_url https://security.gentoo.org/glsa/200711-06
reference_id GLSA-200711-06
reference_type
scores
url https://security.gentoo.org/glsa/200711-06
7
reference_url https://access.redhat.com/errata/RHSA-2007:0746
reference_id RHSA-2007:0746
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0746
8
reference_url https://access.redhat.com/errata/RHSA-2007:0747
reference_id RHSA-2007:0747
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0747
9
reference_url https://access.redhat.com/errata/RHSA-2007:0911
reference_id RHSA-2007:0911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0911
10
reference_url https://access.redhat.com/errata/RHSA-2008:0005
reference_id RHSA-2008:0005
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0005
11
reference_url https://usn.ubuntu.com/575-1/
reference_id USN-575-1
reference_type
scores
url https://usn.ubuntu.com/575-1/
fixed_packages
0
url pkg:apache/httpd@2.2.6
purl pkg:apache/httpd@2.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3u4s-a96g-v3aq
4
vulnerability VCID-435a-8xfp-6qes
5
vulnerability VCID-4zr3-hrfp-ekeh
6
vulnerability VCID-59v3-3ms3-9fg3
7
vulnerability VCID-6bsk-g6yj-2khy
8
vulnerability VCID-6fav-yrx7-r7ar
9
vulnerability VCID-6x9n-8arm-3kbk
10
vulnerability VCID-7j8b-zqfh-byd8
11
vulnerability VCID-7j9j-sxt1-6qa6
12
vulnerability VCID-7x6x-s2w3-xygz
13
vulnerability VCID-8qcw-mekw-buh6
14
vulnerability VCID-8vkp-k5yr-n3bn
15
vulnerability VCID-8zzs-cvkw-nubr
16
vulnerability VCID-9nuk-vm33-kkha
17
vulnerability VCID-9qsz-zr6r-z3c3
18
vulnerability VCID-awb7-8p6u-2fa3
19
vulnerability VCID-bame-16es-e7a2
20
vulnerability VCID-bg3g-yc4h-3bdu
21
vulnerability VCID-cbcf-d64d-8bd2
22
vulnerability VCID-cm2b-nhrm-mfdr
23
vulnerability VCID-dj7a-88wd-dugh
24
vulnerability VCID-dkh9-b39c-uqgz
25
vulnerability VCID-dr6d-j9as-qfby
26
vulnerability VCID-e4mk-ydp9-m3bx
27
vulnerability VCID-ehc1-xda2-8bb3
28
vulnerability VCID-epgm-u9j7-7bd1
29
vulnerability VCID-fsva-ef97-87hs
30
vulnerability VCID-fwbt-3uqc-sqf7
31
vulnerability VCID-g655-us3x-37c2
32
vulnerability VCID-grnf-r71w-r3h7
33
vulnerability VCID-h6qp-sn1h-byap
34
vulnerability VCID-hv8d-3r75-abfb
35
vulnerability VCID-kg8r-vq3s-2qa4
36
vulnerability VCID-m7y1-9mdy-6bfx
37
vulnerability VCID-n9f3-w699-97fe
38
vulnerability VCID-ne55-gstx-1qfu
39
vulnerability VCID-nxqt-4e79-w3et
40
vulnerability VCID-p9db-n3kt-puhp
41
vulnerability VCID-pfc7-ap3y-u7ds
42
vulnerability VCID-rj9n-s2a4-w7he
43
vulnerability VCID-sfx1-4tej-gqgs
44
vulnerability VCID-szmq-1zrf-mfa6
45
vulnerability VCID-uhmn-527n-fqgq
46
vulnerability VCID-uhyk-pc9e-w7cu
47
vulnerability VCID-ukk2-3cpg-7ugy
48
vulnerability VCID-vu91-nh94-nkb2
49
vulnerability VCID-vy92-b4as-a7hp
50
vulnerability VCID-w4b1-tu6b-mkc7
51
vulnerability VCID-xmt2-8ett-qbgx
52
vulnerability VCID-xn4w-pvu5-dyhb
53
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.6
aliases CVE-2007-3847
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yyjh-f7n6-e3eg
57
url VCID-ztw8-eevd-fqba
vulnerability_id VCID-ztw8-eevd-fqba
summary A flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafted Range header. This could be used in a denial of service attack. Advisory: CVE-2011-3192.txt
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3192.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3192.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3192
reference_id
reference_type
scores
0
value 0.90456
scoring_system epss
scoring_elements 0.99626
published_at 2026-06-11T12:55:00Z
1
value 0.90456
scoring_system epss
scoring_elements 0.99627
published_at 2026-06-12T12:55:00Z
2
value 0.90456
scoring_system epss
scoring_elements 0.99628
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3192
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=732928
reference_id 732928
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=732928
4
reference_url https://httpd.apache.org/security/json/CVE-2011-3192.json
reference_id CVE-2011-3192
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2011-3192.json
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/18221.c
reference_id CVE-2014-5329;OSVDB-74721;CVE-2011-3192
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/18221.c
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/17696.pl
reference_id CVE-2014-5329;OSVDB-74721;CVE-2011-3192
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/17696.pl
7
reference_url https://security.gentoo.org/glsa/201206-25
reference_id GLSA-201206-25
reference_type
scores
url https://security.gentoo.org/glsa/201206-25
8
reference_url https://access.redhat.com/errata/RHSA-2011:1245
reference_id RHSA-2011:1245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1245
9
reference_url https://access.redhat.com/errata/RHSA-2011:1294
reference_id RHSA-2011:1294
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1294
10
reference_url https://access.redhat.com/errata/RHSA-2011:1300
reference_id RHSA-2011:1300
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1300
11
reference_url https://access.redhat.com/errata/RHSA-2011:1329
reference_id RHSA-2011:1329
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1329
12
reference_url https://access.redhat.com/errata/RHSA-2011:1330
reference_id RHSA-2011:1330
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1330
13
reference_url https://usn.ubuntu.com/1199-1/
reference_id USN-1199-1
reference_type
scores
url https://usn.ubuntu.com/1199-1/
fixed_packages
0
url pkg:apache/httpd@2.2.20
purl pkg:apache/httpd@2.2.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2v5v-34s6-3fdk
1
vulnerability VCID-3u4s-a96g-v3aq
2
vulnerability VCID-5384-9rhf-5yby
3
vulnerability VCID-6bsk-g6yj-2khy
4
vulnerability VCID-6fav-yrx7-r7ar
5
vulnerability VCID-7j9j-sxt1-6qa6
6
vulnerability VCID-7x6x-s2w3-xygz
7
vulnerability VCID-8qcw-mekw-buh6
8
vulnerability VCID-8vkp-k5yr-n3bn
9
vulnerability VCID-9nuk-vm33-kkha
10
vulnerability VCID-bg3g-yc4h-3bdu
11
vulnerability VCID-cm2b-nhrm-mfdr
12
vulnerability VCID-dj7a-88wd-dugh
13
vulnerability VCID-e4mk-ydp9-m3bx
14
vulnerability VCID-epgm-u9j7-7bd1
15
vulnerability VCID-grnf-r71w-r3h7
16
vulnerability VCID-h6qp-sn1h-byap
17
vulnerability VCID-kg8r-vq3s-2qa4
18
vulnerability VCID-m4ps-cv5v-n7fr
19
vulnerability VCID-ne55-gstx-1qfu
20
vulnerability VCID-nxqt-4e79-w3et
21
vulnerability VCID-p9db-n3kt-puhp
22
vulnerability VCID-rj9n-s2a4-w7he
23
vulnerability VCID-rxv4-mugn-akhf
24
vulnerability VCID-sfx1-4tej-gqgs
25
vulnerability VCID-szmq-1zrf-mfa6
26
vulnerability VCID-uhmn-527n-fqgq
27
vulnerability VCID-uhyk-pc9e-w7cu
28
vulnerability VCID-xmt2-8ett-qbgx
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.20
aliases CVE-2011-3192
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ztw8-eevd-fqba
Fixing_vulnerabilities
0
url VCID-vtek-d13y-3fbz
vulnerability_id VCID-vtek-d13y-3fbz
summary An off-by-one flaw exists in the Rewrite module, mod_rewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely. For vulnerable builds, the nature of the vulnerability can be denial of service (crashing of web server processes) or potentially allow arbitrary code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3747.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-3747.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-3747
reference_id
reference_type
scores
0
value 0.90024
scoring_system epss
scoring_elements 0.99601
published_at 2026-06-12T12:55:00Z
1
value 0.90024
scoring_system epss
scoring_elements 0.99602
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-3747
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380182
reference_id 380182
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380182
4
reference_url https://httpd.apache.org/security/json/CVE-2006-3747.json
reference_id CVE-2006-3747
reference_type
scores
0
value important
scoring_system apache_httpd
scoring_elements
url https://httpd.apache.org/security/json/CVE-2006-3747.json
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/16752.rb
reference_id CVE-2006-3747;OSVDB-27588
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/16752.rb
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3996.c
reference_id CVE-2006-3747;OSVDB-27588
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/3996.c
7
reference_url https://security.gentoo.org/glsa/200608-01
reference_id GLSA-200608-01
reference_type
scores
url https://security.gentoo.org/glsa/200608-01
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/2237.sh
reference_id OSVDB-27588;CVE-2006-3747
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/2237.sh
9
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows_x86/remote/3680.sh
reference_id OSVDB-27588;CVE-2006-3747
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows_x86/remote/3680.sh
10
reference_url https://usn.ubuntu.com/328-1/
reference_id USN-328-1
reference_type
scores
url https://usn.ubuntu.com/328-1/
fixed_packages
0
url pkg:apache/httpd@1.3.37
purl pkg:apache/httpd@1.3.37
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s85-xfpq-xqbs
1
vulnerability VCID-g655-us3x-37c2
2
vulnerability VCID-ka22-e3wp-yff7
3
vulnerability VCID-pfc7-ap3y-u7ds
4
vulnerability VCID-szmq-1zrf-mfa6
5
vulnerability VCID-v922-tvvm-nkd8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@1.3.37
1
url pkg:apache/httpd@2.0.59
purl pkg:apache/httpd@2.0.59
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-3s85-xfpq-xqbs
3
vulnerability VCID-435a-8xfp-6qes
4
vulnerability VCID-59v3-3ms3-9fg3
5
vulnerability VCID-6bsk-g6yj-2khy
6
vulnerability VCID-6x9n-8arm-3kbk
7
vulnerability VCID-awb7-8p6u-2fa3
8
vulnerability VCID-bame-16es-e7a2
9
vulnerability VCID-bg3g-yc4h-3bdu
10
vulnerability VCID-dkh9-b39c-uqgz
11
vulnerability VCID-dr6d-j9as-qfby
12
vulnerability VCID-ehc1-xda2-8bb3
13
vulnerability VCID-fwbt-3uqc-sqf7
14
vulnerability VCID-g655-us3x-37c2
15
vulnerability VCID-h6qp-sn1h-byap
16
vulnerability VCID-hv8d-3r75-abfb
17
vulnerability VCID-ka22-e3wp-yff7
18
vulnerability VCID-p9db-n3kt-puhp
19
vulnerability VCID-pfc7-ap3y-u7ds
20
vulnerability VCID-szmq-1zrf-mfa6
21
vulnerability VCID-vch8-nryx-rbea
22
vulnerability VCID-vu91-nh94-nkb2
23
vulnerability VCID-xn4w-pvu5-dyhb
24
vulnerability VCID-yyjh-f7n6-e3eg
25
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.0.59
2
url pkg:apache/httpd@2.2.3
purl pkg:apache/httpd@2.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27cw-pun8-tbay
1
vulnerability VCID-2g26-cq3w-1kh4
2
vulnerability VCID-2v5v-34s6-3fdk
3
vulnerability VCID-3s85-xfpq-xqbs
4
vulnerability VCID-3u4s-a96g-v3aq
5
vulnerability VCID-435a-8xfp-6qes
6
vulnerability VCID-4zr3-hrfp-ekeh
7
vulnerability VCID-59v3-3ms3-9fg3
8
vulnerability VCID-6bsk-g6yj-2khy
9
vulnerability VCID-6fav-yrx7-r7ar
10
vulnerability VCID-6x9n-8arm-3kbk
11
vulnerability VCID-7j8b-zqfh-byd8
12
vulnerability VCID-7j9j-sxt1-6qa6
13
vulnerability VCID-7x6x-s2w3-xygz
14
vulnerability VCID-8qcw-mekw-buh6
15
vulnerability VCID-8vkp-k5yr-n3bn
16
vulnerability VCID-8zzs-cvkw-nubr
17
vulnerability VCID-9nuk-vm33-kkha
18
vulnerability VCID-9qsz-zr6r-z3c3
19
vulnerability VCID-awb7-8p6u-2fa3
20
vulnerability VCID-bame-16es-e7a2
21
vulnerability VCID-bg3g-yc4h-3bdu
22
vulnerability VCID-cbcf-d64d-8bd2
23
vulnerability VCID-cm2b-nhrm-mfdr
24
vulnerability VCID-dj7a-88wd-dugh
25
vulnerability VCID-dkh9-b39c-uqgz
26
vulnerability VCID-dr6d-j9as-qfby
27
vulnerability VCID-e4mk-ydp9-m3bx
28
vulnerability VCID-ehc1-xda2-8bb3
29
vulnerability VCID-epgm-u9j7-7bd1
30
vulnerability VCID-fsva-ef97-87hs
31
vulnerability VCID-fwbt-3uqc-sqf7
32
vulnerability VCID-g655-us3x-37c2
33
vulnerability VCID-grnf-r71w-r3h7
34
vulnerability VCID-h6qp-sn1h-byap
35
vulnerability VCID-hv8d-3r75-abfb
36
vulnerability VCID-ka22-e3wp-yff7
37
vulnerability VCID-kg8r-vq3s-2qa4
38
vulnerability VCID-m7y1-9mdy-6bfx
39
vulnerability VCID-n9f3-w699-97fe
40
vulnerability VCID-ne55-gstx-1qfu
41
vulnerability VCID-nxqt-4e79-w3et
42
vulnerability VCID-p9db-n3kt-puhp
43
vulnerability VCID-pfc7-ap3y-u7ds
44
vulnerability VCID-rj9n-s2a4-w7he
45
vulnerability VCID-sfx1-4tej-gqgs
46
vulnerability VCID-szmq-1zrf-mfa6
47
vulnerability VCID-uhmn-527n-fqgq
48
vulnerability VCID-uhyk-pc9e-w7cu
49
vulnerability VCID-ukk2-3cpg-7ugy
50
vulnerability VCID-vch8-nryx-rbea
51
vulnerability VCID-vu91-nh94-nkb2
52
vulnerability VCID-vy92-b4as-a7hp
53
vulnerability VCID-w4b1-tu6b-mkc7
54
vulnerability VCID-xmt2-8ett-qbgx
55
vulnerability VCID-xn4w-pvu5-dyhb
56
vulnerability VCID-yyjh-f7n6-e3eg
57
vulnerability VCID-ztw8-eevd-fqba
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.3
aliases CVE-2006-3747
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vtek-d13y-3fbz
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.2.3