Modsecurity - vulnerabilities (CVEs)

7 CVEs in 2 products, 0 in the last 30 days, newest from 2024-10-09.

Products

CVE-2024-46292 - CVSS 7.5 (high), 2024-10-09: A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this…
CVE-2019-13464 - CVSS 7.5 (high), 2019-07-09: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules,…
CVE-2019-11388 - CVSS 5.3 (medium), 2019-04-21: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to…
CVE-2019-11391 - CVSS 5.3 (medium), 2019-04-21: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to…
CVE-2019-11387 - CVSS 5.3 (medium), 2019-04-21: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to…
CVE-2019-11390 - CVSS 5.3 (medium), 2019-04-21: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to…
CVE-2019-11389 - CVSS 5.3 (medium), 2019-04-21: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to…