CH
Vendor
Cherokee
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2009-4587 | CH Cherokee Cherokee | – | Jan 7 | Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word |
| CVE-2009-3902 | CH Cherokee Httpd Cherokee | – | Nov 6 | Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\ |
| CVE-2006-1681 | CH Cherokee Httpd Cherokee | – | Apr 11 | Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an… |
| CVE-2004-1097 | CH Cherokee Httpd Cherokee | – | Jan 10 | Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a… |
| CVE-2004-2171 | CH Cherokee Httpd Cherokee | – | Dec 31 | Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the… |
| CVE-2004-1946 | CH Cherokee Httpd Cherokee | – | Apr 19 | Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string… |
| CVE-2003-1198 | CH Cherokee Httpd Cherokee | – | Dec 26 | connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field |
| CVE-2001-1432 | CH Cherokee Httpd Cherokee | – | Dec 29 | Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a |
| CVE-2001-1433 | CH Cherokee Httpd Cherokee | – | Dec 29 | Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities |