pico server records
7 published records for vendor pico server.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2005-1365Proof of concept | Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characpico server · pico server | Critical10.0 | — | 12.0% | May 16, 2005 |
32Monitor | CVE-2005-1366Proof of concept | Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.pico server · pico server | High7.5 | — | 6.9% | May 16, 2005 |
32Monitor | CVE-2002-2295Proof of concept | Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly epico server · pico server · CWE-119 | High7.5 | — | 6.6% | Dec 31, 2002 |
31Monitor | CVE-2005-1953No exploit | Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTpico server · pico server | High7.5 | — | 3.2% | Jun 11, 2005 |
31Monitor | CVE-2005-1952No exploit | Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands pico server · pico server | High7.5 | — | 2.3% | Jun 16, 2005 |
31Monitor | CVE-2005-1626No exploit | Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code.pico server · pico server | High7.5 | — | 2.0% | May 17, 2005 |
30Monitor | CVE-2005-1367No exploit | Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web pico server · pico server | High7.5 | — | 1.2% | May 16, 2005 |
- CVE-2005-136544Plan
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) charac
CriticalCVSS 10.0Proof of conceptEPSS 12%pico server · pico serverMay 16, 2005
- CVE-2005-136632Monitor
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.
HighCVSS 7.5Proof of conceptEPSS 6%pico server · pico serverMay 16, 2005
- CVE-2002-229532Monitor
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly e
HighCVSS 7.5Proof of conceptEPSS 6%pico server · pico serverDec 31, 2002
- CVE-2005-195331Monitor
Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTT
HighCVSS 7.5No exploitEPSS 3%pico server · pico serverJun 11, 2005
- CVE-2005-195231Monitor
Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands
HighCVSS 7.5No exploitEPSS 2%pico server · pico serverJun 16, 2005
- CVE-2005-162631Monitor
Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code.
HighCVSS 7.5No exploitEPSS 2%pico server · pico serverMay 17, 2005
- CVE-2005-136730Monitor
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web
HighCVSS 7.5No exploitEPSS 1%pico server · pico serverMay 16, 2005