GO
Product
GoAhead
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 1Low 0
Watch
Add GoAhead to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-17562 In wildKEV | 8.1 | Dec 12 | Embedthis GoAhead Remote Code Execution Vulnerability Affected: before 3.6.5 |
| CVE-2020-15688 | 8.8 | Jul 23 | The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks Affected: before 5.1.2 |
| CVE-2017-5675 | 8.8 | Mar 13 | A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models Affected: All versions, or not specified |
| CVE-2019-16645 | 8.6 | Sep 20 | An issue was discovered in Embedthis GoAhead 2.5.0 Affected: 2.5.0 |
| CVE-2019-5097 | 7.5 | Dec 3 | A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5 Affected: 3.6.5; 4.1.1; 5.0.1 |
| CVE-2019-12822 | 7.5 | Jun 14 | In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as… Affected: before 4.1.1; 5.0.0 before 5.0.1 |
| CVE-2018-15505 | 7.5 | Aug 18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2 Affected: before 4.0.1 |
| CVE-2018-15504 | 7.5 | Aug 18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2 Affected: before 4.0.1 |
| CVE-2017-14149 | 7.5 | Sep 5 | GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 3.4.5; +14 more |
Showing 9