CVE Tools
Track your stack

Trustwave

9 CVEs tracked since 2009. Since Jun 2009, none of them reached CISA KEV.

Trustwave CVEs per month

Jun 2009 to Jul 2013. Point at a month, or focus the strip and use the arrow keys.
Trustwave CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2009-0620
2009-07null or fewer
2009-08null or fewer
2009-09null or fewer
2009-10null or fewer
2009-11null or fewer
2009-12null or fewer
2010-01null or fewer
2010-02null or fewer
2010-03null or fewer
2010-04null or fewer
2010-05null or fewer
2010-06null or fewer
2010-07null or fewer
2010-08null or fewer
2010-09null or fewer
2010-10null or fewer
2010-11null or fewer
2010-12null or fewer
2011-01null or fewer
2011-02null or fewer
2011-03null or fewer
2011-04null or fewer
2011-0520
2011-06null or fewer
2011-07null or fewer
2011-08null or fewer
2011-09null or fewer
2011-10null or fewer
2011-11null or fewer
2011-12null or fewer
2012-01null or fewer
2012-02null or fewer
2012-03null or fewer
2012-04null or fewer
2012-05null or fewer
2012-06null or fewer
2012-0720
2012-08null or fewer
2012-09null or fewer
2012-10null or fewer
2012-11null or fewer
2012-1210
2013-01null or fewer
2013-02null or fewer
2013-03null or fewer
2013-0410
2013-05null or fewer
2013-06null or fewer
2013-0710

Products

The products that kept showing up in Trustwave's monthly top three, with their CVEs summed over those months.

  1. Modsecurity75 months
  2. Webdefend21 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Trustwave.

  1. CVE-2025-47947ModSecurity Has Possible DoS Vulnerability7.5
  2. CVE-2025-27110Libmodsecurity3 has possible bypass of encoded HTML entities7.5
  3. CVE-2024-46292A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it ...7.5
  4. CVE-2023-24021Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rul...7.5
  5. CVE-2022-48279In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be c...7.5
  6. CVE-2021-42717ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate ...7.5
  7. CVE-2014-2727The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection.9.8
  8. CVE-2017-18001Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, ...9.8
  9. CVE-2013-5705apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.5.0
  10. CVE-2013-2765The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST reques...5.0
  11. CVE-2013-1915ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entit...7.5
  12. CVE-2012-4528The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an i...5.0
  13. CVE-2012-2751ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart...4.3
  14. CVE-2009-5031ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scr...4.3
  15. CVE-2011-1906Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table vi...5.0

The record

Peak rank
#43 in May 2011
Busiest month shown
Jun 2009, 2 CVEs
Months with a KEV entry
0 since Jun 2009
Monthly snapshots
6 since 2009
Trustwave's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store