HI
Vendor
Hiawatha-webserver
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-57784 | HI Hiawatha Hiawatha-webserver | 3.3 | Jan 26 | Tomahawk authentication timing attack due to usage of 'strcmp' |
| CVE-2025-57783 | HI Hiawatha Hiawatha-webserver | 5.3 | Jan 26 | Improper header parsing may lead to request smuggling |
| CVE-2019-8358 | HI Hiawatha Hiawatha-webserver | 8.1 | Feb 16 | In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled |