Количество 12
Количество 12
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available.
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available.
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available.
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall ...
RLSA-2025:8844
Important: mod_security security update
RLSA-2025:8837
Important: mod_security security update
ELSA-2025-8844
ELSA-2025-8844: mod_security security update (IMPORTANT)
ELSA-2025-8837
ELSA-2025-8837: mod_security security update (IMPORTANT)
BDU:2025-06207
Уязвимость конфигурации sanitiseMatchedBytes межсетевого экрана для защиты веб-приложений ModSecurity, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:02052-1
Security update for apache2-mod_security2
SUSE-SU-2025:02029-1
Security update for apache2-mod_security2
SUSE-SU-2025:02028-1
Security update for apache2-mod_security2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
| CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall ... | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | RLSA-2025:8844 Important: mod_security security update | 0% Низкий | 5 месяцев назад | |
| RLSA-2025:8837 Important: mod_security security update | 0% Низкий | 2 месяца назад | |
| ELSA-2025-8844 ELSA-2025-8844: mod_security security update (IMPORTANT) | 6 месяцев назад | ||
| ELSA-2025-8837 ELSA-2025-8837: mod_security security update (IMPORTANT) | 6 месяцев назад | ||
 | BDU:2025-06207 Уязвимость конфигурации sanitiseMatchedBytes межсетевого экрана для защиты веб-приложений ModSecurity, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 7 месяцев назад |
 | SUSE-SU-2025:02052-1 Security update for apache2-mod_security2 | 6 месяцев назад | ||
| SUSE-SU-2025:02029-1 Security update for apache2-mod_security2 | 6 месяцев назад | ||
| SUSE-SU-2025:02028-1 Security update for apache2-mod_security2 | 6 месяцев назад |
Уязвимостей на страницу