CH
Product
Cherokee
by Cherokee-project · last CVE Jul 27, 2020
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 0Low 0
Watch

Add Cherokee to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-20800
9.8
2%
May 18
In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by sending many request headers, as…
Affected: through 1.2.104
CVE-2019-20798
8.4
2%
May 18
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104
Affected: through 1.2.104
CVE-2020-12845
7.5
3%
Jul 27
Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences
Affected: 0.4.27 through 1.2.104
CVE-2019-20799
7.5
2%
May 18
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server
Affected: through 1.2.104
CVE-2014-4668
–
3%
Jul 2
The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which…
Affected: through 1.2.103; 1.2.2; 1.2.98; 1.2.99; 1.2.101; 1.2.102
CVE-2011-2191
–
1%
Oct 7
Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests…
Affected: through 1.2.98; 0.3.0; 0.4.0; 0.4.1; 0.4.2; 0.4.3; +34 more
CVE-2011-2190
–
0%
Oct 7
The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to…
Affected: through 1.2.98; 0.3.0; 0.4.0; 0.4.1; 0.4.2; 0.4.3; +34 more
CVE-2009-4489
–
10%
Jan 13
header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or…
Affected: through 0.99.31
Showing 8