Dwarf Http Server vulnerabilities | LiveThreat CVE Feed

Product

Dwarf Http Server

by Gnome · last CVE Mar 13, 2006

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Dwarf Http Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2006-0819	–	2%	Mar 13	Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an… Affected: 1.3.2
CVE-2006-0820	–	1%	Mar 13	Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages Affected: 1.3.2