CH
Vendor
Cherokee-project
9
CVEs
0
On KEV
0
New 30D
Products
CH9.8
Cherokee
Cherokee-project
8 CVEs0 on KEV0 new
CW7.5
Cherokee Web Server
Cherokee-project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-12845 | CH Cherokee Cherokee-project | 7.5 | Jul 27 | Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences |
| CVE-2019-20800 | CH Cherokee Cherokee-project | 9.8 | May 18 | In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by sending many request headers, as… |
| CVE-2019-20799 | CH Cherokee Cherokee-project | 7.5 | May 18 | In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server |
| CVE-2019-20798 | CH Cherokee Cherokee-project | 8.4 | May 18 | An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104 |
| CVE-2019-1010218 | CW Cherokee Web Server Cherokee-project | 7.5 | Jul 22 | Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120 |
| CVE-2014-4668 | CH Cherokee Cherokee-project | – | Jul 2 | The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which… |
| CVE-2011-2191 | CH Cherokee Cherokee-project | – | Oct 7 | Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests… |
| CVE-2011-2190 | CH Cherokee Cherokee-project | – | Oct 7 | The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to… |
| CVE-2009-4489 | CH Cherokee Cherokee-project | – | Jan 13 | header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or… |