MO
Product
Modsecurity
14
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch
Add Modsecurity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-47947 | 7.5 | May 21 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx Affected: before 2.9.9 |
| CVE-2025-27110 | 7.5 | Feb 25 | Libmodsecurity is one component of the ModSecurity v3 project Affected: 3.0.13 |
| CVE-2024-46292 | 7.5 | Oct 9 | A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter Affected: 3.0.12 |
| CVE-2023-24021 | 7.5 | Jan 20 | Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall… Affected: before 2.9.7 |
| CVE-2022-48279 | 7.5 | Jan 20 | In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall Affected: before 2.9.6 |
| CVE-2021-42717 | 7.5 | Dec 7 | ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects Affected: 2.0.0 before 2.9.5 |
Showing 6