Login Request a demo
OM
Product
Omnihttpd
by Omnicron · last CVE Jun 9, 2003
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Omnihttpd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2002-1455
–
4%
Jun 9
Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe
Affected: All versions, or not specified
CVE-2002-1035
–
2%
Oct 4
Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number
Affected: 2.09
CVE-2001-0777
–
2%
Oct 18
Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts
Affected: 2.0.4; 2.0.5; 2.0.6; 2.0.7; 2.0.8
CVE-2001-0778
–
6%
Oct 18
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20)
Affected: through 2.0.8
CVE-2001-0613
–
2%
Aug 22
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request
Affected: through 2.0.8
CVE-2001-0114
–
2%
Mar 12
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter
Affected: 2.0.7
CVE-2001-0113
–
10%
Mar 12
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script
Affected: 2.0.7
CVE-1999-0951
–
10%
Oct 22
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands
Affected: 1.1; 2.4pro
CVE-1999-0970
–
3%
Jun 5
The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created
Affected: All versions, or not specified
Showing 9