protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 56.0%.
Apache
Information Disclosure
Http Server
Debian Linux
Opensuse
+9
NVD
Exploit-DB
CVSS 2.0
4.3
EPSS
56.0%
Threat
4.0
Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Schneider Electric
XSS
Modicon Quantum Plc
NVD
CVSS 3.1
6.1
EPSS
1.1%