Login Request a demo
MH
Product
Mini Httpd
by Acme · last CVE Oct 29, 2018
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities5Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mini Httpd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-17663
9.8
3%
Feb 6
The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution
Affected: before 1.28
CVE-2018-18778
6.5
71%
Oct 29
ACME mini_httpd before 1.30 lets remote users read arbitrary files
Affected: before 1.30
CVE-2015-1548
–
2%
Feb 10
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an…
Affected: through 1.21
CVE-2009-4490
–
10%
Jan 13
mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary…
Affected: 1.19
CVE-2001-0893
–
3%
Nov 13
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /
Affected: through 1.16
Showing 5