LI
Product
lighttpd
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add lighttpd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11072 | 9.8 | Apr 10 | lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact… Affected: through 1.4.53 |
| CVE-2014-2323 | 9.8 | Mar 14 | SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to… Affected: before 1.4.35 |
| CVE-2025-12642 | 9.1 | Nov 3 | HTTP Header Smuggling via Trailer Merge Affected: 1.4.80 before 1.4.81 |
Showing 3