Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
4 matching records.
-
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, src/transaction.cc compares a response Content-Type value against SecResponseBodyMimeType…
-
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 until 3.0.17, ModSecurity's multipart parser does not apply the RFC 2231 filename* parameter precedence…
-
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.5 until 3.0.17, the PCRE2 implementation of @rxGlobal in src/utils/regex.cc converts pcre2_match match-limit…
-
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, the HttpsClient::download function in src/utils/https_client.cc sets libcurl…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Owasp-Modsecurity&limit=100. RSS for this section: feed.xml.