cherokee-project kayıtları
cherokee-project üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write2
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-310 Cryptographic Issues1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-476 NULL Pointer Dereference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-20800İstismar yok | In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by secherokee-project · cherokee · CWE-787 | Kritik9,8 | — | %2,1 | 17 May 2020 |
33İzleyin | CVE-2019-20798İstismar yok | An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104.cherokee-project · cherokee · CWE-79 | Yüksek8,4 | — | %1,6 | 17 May 2020 |
31İzleyin | CVE-2020-12845İstismar yok | Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences.cherokee-project · cherokee · CWE-476 | Yüksek7,5 | — | %3,2 | 27 Tem 2020 |
31İzleyin | CVE-2019-20799İstismar yok | In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.cherokee-project · cherokee · CWE-787 | Yüksek7,5 | — | %2,3 | 17 May 2020 |
30İzleyin | CVE-2019-1010218İstismar yok | Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120.cherokee-project · cherokee web server · CWE-120 | Yüksek7,5 | — | %1,3 | 22 Tem 2019 |
28İzleyin | CVE-2014-4668İstismar yok | The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly considefedoraproject · fedora · CWE-287 | Orta6,8 | — | %2,8 | 2 Tem 2014 |
27İzleyin | CVE-2011-2191İstismar yok | Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authenticacherokee-project · cherokee · CWE-352 | Orta6,8 | — | %1,3 | 6 Eki 2011 |
23İzleyin | CVE-2009-4489Kavram kanıtı | header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackercherokee-project · cherokee · CWE-20 | Orta5,0 | — | %9,8 | 13 Oca 2010 |
8İzleyin | CVE-2011-2190İstismar yok | The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makecherokee-project · cherokee · CWE-310 | Düşük2,1 | — | %0,3 | 6 Eki 2011 |
- CVE-2019-2080040Planlayın
In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by se
KritikCVSS 9,8İstismar yokEPSS %2cherokee-project · cherokee17 May 2020
- CVE-2019-2079833İzleyin
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104.
YüksekCVSS 8,4İstismar yokEPSS %1cherokee-project · cherokee17 May 2020
- CVE-2020-1284531İzleyin
Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences.
YüksekCVSS 7,5İstismar yokEPSS %3cherokee-project · cherokee27 Tem 2020
- CVE-2019-2079931İzleyin
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
YüksekCVSS 7,5İstismar yokEPSS %2cherokee-project · cherokee17 May 2020
- CVE-2019-101021830İzleyin
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120.
YüksekCVSS 7,5İstismar yokEPSS %1cherokee-project · cherokee web server22 Tem 2019
- CVE-2014-466828İzleyin
The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly conside
OrtaCVSS 6,8İstismar yokEPSS %2fedoraproject · fedora2 Tem 2014
- CVE-2011-219127İzleyin
Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentica
OrtaCVSS 6,8İstismar yokEPSS %1cherokee-project · cherokee6 Eki 2011
- CVE-2009-448923İzleyin
header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attacker
OrtaCVSS 5,0Kavram kanıtıEPSS %9cherokee-project · cherokee13 Oca 2010
- CVE-2011-21908İzleyin
The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which make
DüşükCVSS 2,1İstismar yokEPSS %0cherokee-project · cherokee6 Eki 2011