GO
Product
GoAhead
On CISA KEVExploited in the wild
21
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 10Medium 4Low 0
Watch
Add GoAhead to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3187 | 5.9 | Oct 17 | This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0 Affected: through 6.0.0 |
| CVE-2024-3184 | 5.9 | Oct 17 | Multiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead Web Server up to version 6.0.0 when compiled with the ME_GOAHEAD_REPLACE_MALLOC flag Affected: through 6.0.0 |
| CVE-2024-3186 | 5.3 | Oct 17 | CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server (version <= 6.0.0) when compiled with the ME_GOAHEAD_JAVASCRIPT flag Affected: through 6.0.0 |
| CVE-2019-19240 | 5.3 | Nov 22 | Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header Affected: before 5.0.1 |
Showing 4