AP
Product
Appweb
6
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 0Low 0
Watch
Add Appweb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8715 | 8.1 | Mar 15 | The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c Affected: through 7.0.2 |
| CVE-2021-33254 | 7.5 | Jun 2 | An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri… Affected: 8.2.1 |
| CVE-2020-15689 | 7.5 | Jul 13 | Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range Affected: before 7.2.2; 8.0.0 before 8.1.0 |
| CVE-2018-15504 | 7.5 | Aug 18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2 Affected: before 7.0.2 |
| CVE-2018-15505 | 7.5 | Aug 18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2 Affected: before 7.0.2 |
| CVE-2014-9708 | – | Mar 31 | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as… Affected: before 4.6.6; 5.0.0 before 5.2.1 |
Showing 6