Skip to content
Noroxi

ACME records

15 published records for vendor acme.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
40%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2018-18778
    47Plan

    ACME mini_httpd before 1.30 lets remote users read arbitrary files.

    MediumCVSS 6.5Proof of conceptEPSS 70%

    acme · mini-httpdOct 29, 2018

  • CVE-2003-0899
    46Plan

    Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contai

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    acme · thttpdNov 3, 2003

  • CVE-2009-4491
    43Plan

    thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    acme · thttpdJan 13, 2010

  • CVE-2001-1496
    40Plan

    Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of servic

    CriticalCVSS 9.8No exploitEPSS 4%

    acme · thttpdDec 31, 2001

  • CVE-2017-17663
    40Plan

    The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited rem

    CriticalCVSS 9.8No exploitEPSS 2%

    acme · mini httpdFeb 6, 2018

  • CVE-2007-0158
    39Monitor

    thttpd 2007 has buffer underflow.

    CriticalCVSS 9.8No exploitEPSS 1%

    acme · thttpdDec 27, 2019

  • CVE-2014-4927
    34Monitor

    Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote atta

    HighCVSS 7.8Proof of conceptEPSS 11%

    acme · micro httpdJul 24, 2014

  • CVE-2024-0263
    30Monitor

    ACME Ultra Mini HTTPd HTTP GET Request denial of service

    HighCVSS 7.5No exploitEPSS 1%

    acme · ultra mini httpdJan 7, 2024

  • CVE-2009-4490
    23Monitor

    mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window

    MediumCVSS 5.0Proof of conceptEPSS 10%

    acme · mini httpdJan 13, 2010

  • CVE-2012-5640
    22Monitor

    thttpd has a local DoS vulnerability via specially-crafted .htpasswd files

    MediumCVSS 5.5No exploitEPSS 0%

    acme · thttpdNov 25, 2019

  • CVE-2010-1544
    21Monitor

    micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a long string to TCP port

    MediumCVSS 5.0Proof of conceptEPSS 2%

    rca · digital cable modemApr 26, 2010

  • CVE-2001-0893
    21Monitor

    Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request wi

    MediumCVSS 5.0No exploitEPSS 2%

    acme · mini httpdNov 13, 2001

  • CVE-2001-0892
    21Monitor

    Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document

    MediumCVSS 5.0No exploitEPSS 1%

    acme · thttpdNov 13, 2001

  • CVE-2015-1548
    20Monitor

    mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long prot

    MediumCVSS 5.0No exploitEPSS 1%

    acme · mini httpdFeb 10, 2015

  • CVE-2013-0348
    8Monitor

    thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to ob

    LowCVSS 2.1No exploitEPSS 0%

    open source development team · sthttpdDec 13, 2013