BO
Vendor
Boa
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-47916 | BW Boa Webserver Boa | 7.5 | Nov 14 | Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2024-43367 | BO Boa Boa | 7.5 | Aug 15 | Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects |
| CVE-2022-45956 | BO Boa Boa | 5.3 | Dec 12 | Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization… |
| CVE-2022-44117 | BO Boa Boa | 9.8 | Nov 23 | Boa 0.94.14rc21 is vulnerable to SQL Injection via username |
| CVE-2021-33558 | BO Boa Boa | 7.5 | May 27 | Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html,… |
| CVE-2018-21028 | BO Boa Boa | 7.5 | Oct 11 | Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function |
| CVE-2018-21027 | BO Boa Boa | 9.8 | Oct 11 | Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled |
| CVE-2017-9833 | BO Boa Boa | 7.5 | Jun 24 | /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges |
| CVE-2016-9564 | BO Boa Boa | 7.5 | Nov 30 | Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters |
| CVE-2009-4496 | BO Boa Boa | – | Jan 13 | Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary… |
| CVE-2007-4915 | BW Boa Webserver Boa | – | Sep 17 | The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string… |
| CVE-2000-0920 | BW Boa Webserver Boa | – | Dec 19 | Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified |