Lucene search
+L

216 matches found

Tenable Nessus
Tenable Nessus
•added 2025/06/11 12:00 a.m.•5 views

RHEL 9 : mod_security (RHSA-2025:8937)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8937 advisory. ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fixes: modsecurity: ModSecurity Has Possible D...

7.5CVSS7.9AI score0.00596EPSS
SaveExploits2References4
OSV
OSV
•added 2025/06/10 10:02 a.m.•5 views

RHSA-2025:8674 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

7.5CVSS8.3AI score0.00596EPSS
SaveExploits2References9
RedHat Linux
RedHat Linux
•added 2025/06/09 1:54 p.m.•20 views

Important: Red Hat Security Advisory: mod_security security update

An update for modsecurity is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

7.5CVSS7.4AI score0.00596EPSS
SaveExploits2References2
OSV
OSV
•added 2025/06/09 10:02 a.m.•4 views

RHSA-2025:8627 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

7.5CVSS8.3AI score0.00596EPSS
SaveExploits2References9
OSV
OSV
•added 2025/06/09 10:02 a.m.•6 views

RHSA-2025:8626 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

7.5CVSS8.3AI score0.00596EPSS
SaveExploits2References9
RedHat Linux
RedHat Linux
•added 2025/06/09 1:45 a.m.•16 views

Important: Red Hat Security Advisory: mod_security security update

An update for modsecurity is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS7.4AI score0.00596EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
•added 2025/06/09 1:43 a.m.•26 views

Important: Red Hat Security Advisory: mod_security security update

An update for modsecurity is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.5CVSS7.4AI score0.00596EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/06/09 12:00 a.m.•9 views

RHEL 8 : mod_security (RHSA-2025:8626)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8626 advisory. ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fixes: modsecurity: ModSecurity Has Possible D...

7.5CVSS7.9AI score0.00596EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2025/06/09 12:00 a.m.•4 views

RHEL 8 : mod_security (RHSA-2025:8627)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8627 advisory. ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fixes: modsecurity: ModSecurity Has Possible D...

7.5CVSS7.9AI score0.00596EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2025/06/07 12:00 a.m.•23 views

Fedora 41 : mod_security (2025-719f4a7313)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-719f4a7313 advisory. This update includes modsecurity version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See...

7.5CVSS7.8AI score0.00596EPSS
SaveExploits2References2
OSV
OSV
•added 2025/06/06 10:02 a.m.•8 views

RHSA-2025:8605 Red Hat Security Advisory: mod_security security update

Bulletin has no description...

7.5CVSS8.3AI score0.00596EPSS
SaveExploits2References9
RedHat Linux
RedHat Linux
•added 2025/06/05 4:09 p.m.•24 views

Important: Red Hat Security Advisory: mod_security security update

An update for modsecurity is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...

7.5CVSS7.4AI score0.00596EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/06/05 12:00 a.m.•10 views

RHEL 8 : mod_security (RHSA-2025:8605)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8605 advisory. ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fixes: modsecurity: ModSecurity Has Possible D...

7.5CVSS7.9AI score0.00596EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2024/11/15 12:00 a.m.•19 views

Fedora 37 : mod_security / mod_security_crs (2022-1fd73a5285)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-1fd73a5285 advisory. - version update - security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

9.8CVSS7.6AI score0.01411EPSS
SaveExploits0References5
NVD
NVD
•added 2024/07/25 5:15 p.m.•33 views

CVE-2024-41801

OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the default configuration of packaged installations and using the "Login required" setting, an attacker could redirect to a remote host to initiate a phishing attack against an OpenProje...

6.1CVSS0.00337EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/07/25 4:50 p.m.•46 views

CVE-2024-41801 OpenProject packaged installation has Open Redirect Vulnerability in Sign-In in default configuration

OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the default configuration of packaged installations and using the "Login required" setting, an attacker could redirect to a remote host to initiate a phishing attack against an OpenProje...

4.7CVSS0.00337EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/25 4:50 p.m.•83 views

CVE-2024-41801

OpenProject prior to 14.3.0 is affected by an open redirect/phishing vulnerability caused by accepting forged HOST headers in default packaged installations with the Login required setting. The issue could allow redirection to a remote host when HOST/X-Forwarded-Host headers are not correctly fix...

6.1CVSS5.8AI score0.00337EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/25 4:50 p.m.•22 views

CVE-2024-41801 OpenProject packaged installation has Open Redirect Vulnerability in Sign-In in default configuration

OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the default configuration of packaged installations and using the "Login required" setting, an attacker could redirect to a remote host to initiate a phishing attack against an OpenProje...

4.7CVSS7.1AI score0.00337EPSS
SaveExploits0References3
OSV
OSV
•added 2024/07/25 4:50 p.m.•28 views

CVE-2024-41801 OpenProject packaged installation has Open Redirect Vulnerability in Sign-In in default configuration

OpenProject is open source project management software. Prior to version 14.3.0, using a forged HOST header in the default configuration of packaged installations and using the "Login required" setting, an attacker could redirect to a remote host to initiate a phishing attack against an OpenProje...

4.7CVSS6.8AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•23 views

RHEL 8 : mod_security (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - modsecurity: lacking the complete content in FILESTMPCONTENT leads to web application firewall bypass...

9.8CVSS7.7AI score0.01204EPSS
SaveExploits0References2
Rows per page
Query Builder