TR
Vendor
Trustwave
18
CVEs
0
On KEV
0
New 30D
Products
MO7.5
Modsecurity
Trustwave
14 CVEs0 on KEV0 new
WE–
Webdefend
Trustwave
2 CVEs0 on KEV0 new
MA9.8
Mailmarshal
Trustwave
1 CVEs0 on KEV0 new
SW9.8
Secure Web Gateway
Trustwave
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-47947 | MO Modsecurity Trustwave | 7.5 | May 21 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx |
| CVE-2025-27110 | MO Modsecurity Trustwave | 7.5 | Feb 25 | Libmodsecurity is one component of the ModSecurity v3 project |
| CVE-2024-46292 | MO Modsecurity Trustwave | 7.5 | Oct 9 | A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter |
| CVE-2023-24021 | MO Modsecurity Trustwave | 7.5 | Jan 20 | Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall… |
| CVE-2022-48279 | MO Modsecurity Trustwave | 7.5 | Jan 20 | In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall |
| CVE-2021-42717 | MO Modsecurity Trustwave | 7.5 | Dec 7 | ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects |
| CVE-2014-2727 | MA Mailmarshal Trustwave | 9.8 | Feb 19 | The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection |
| CVE-2017-18001 | SW Secure Web Gateway Trustwave | 9.8 | Dec 31 | Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain… |
| CVE-2013-5705 | MO Modsecurity Trustwave | – | Apr 15 | apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the… |
| CVE-2013-2765 | MO Modsecurity Trustwave | – | Jul 15 | The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption)… |
| CVE-2013-1915 | MO Modsecurity Trustwave | – | Apr 25 | ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an… |
| CVE-2012-4528 | MO Modsecurity Trustwave | – | Dec 28 | The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart… |
| CVE-2012-2751 | MO Modsecurity Trustwave | – | Jul 22 | ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a… |
| CVE-2009-5031 | MO Modsecurity Trustwave | – | Jul 22 | ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such… |
| CVE-2011-1906 | WE Webdefend Trustwave | – | May 5 | Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event… |
| CVE-2011-0756 | WE Webdefend Trustwave | – | May 5 | The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by… |
| CVE-2009-1903 | MO Modsecurity Trustwave | – | Jun 3 | The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use… |
| CVE-2009-1902 | MO Modsecurity Trustwave | – | Jun 3 | The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header… |