Login Request a demo
CH
Product
Cherokee Httpd
by Cherokee · last CVE Nov 6, 2009
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities8Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cherokee Httpd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-3902
–
4%
Nov 6
Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\
Affected: 0.5.4
CVE-2006-1681
–
7%
Apr 11
Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an…
Affected: 0.1; 0.1.5; 0.1.6; 0.2; 0.2.5; 0.2.6; +7 more
CVE-2004-1097
–
6%
Jan 10
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a…
Affected: 0.1; 0.1.5; 0.1.6; 0.2; 0.2.5; 0.2.6; +5 more
CVE-2004-2171
–
4%
Dec 31
Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the…
Affected: 0.1; 0.1.5; 0.1.6; 0.2; 0.2.5; 0.2.6; +3 more
CVE-2004-1946
–
1%
Apr 19
Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string…
Affected: 0.4.16
CVE-2003-1198
–
2%
Dec 26
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field
Affected: 0.1; 0.1.5; 0.1.6; 0.2; 0.2.5; 0.2.6; +2 more
CVE-2001-1432
–
4%
Dec 29
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a
Affected: 0.1; 0.1.5; 0.1.6; 0.2; 0.2.5; 0.2.6; +1 more
CVE-2001-1433
–
3%
Dec 29
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities
Affected: 0.1; 0.1.5; 0.1.6; 0.2; 0.2.5; 0.2.6
Showing 8