HIGH8.6CVE-2026-52747ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass from 0, < 3.0.16
HIGH8.6CVE-2024-1019WAF bypass of the ModSecurity v3 release line >= 3.0.0, < 3.0.12
HIGH7.5CVE-2024-46292A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name par… >= 3.0.12, < 3.0.13
HIGH7.5ModSecurity has possible DoS vulnerability in sanitiseArg action
from 0, < 3.0.12
HIGH7.5ModSecurity Has Possible DoS Vulnerability
from 0, < 3.0.12
HIGH7.5Libmodsecurity3 has possible bypass of encoded HTML entities
>= 3.0.13, < 3.0.14
HIGH7.5Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
>= 3.0.0, < 3.0.10
HIGH7.5Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs c…
>= 3.0.5, < 3.0.9
HIGH7.5Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer ove…
from 0, < 2.9.7
HIGH7.5modsecurity-apache - security update
from 0, < 2.9.6
HIGH7.5modsecurity-apache - security update
>= 2.0.0, < 2.9.5
HIGH7.5modsecurity - security update
>= 3.0.0, < 3.0.5
MEDIUM6.5ModSecurity empty XML tag causes segmentation fault
>= 2.9.8, < 3.0.12
MEDIUM6.1ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure
from 0, < 2.9.12
MEDIUM5.3ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture
>= 3.0.0, < 3.0.16