Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how lighttpd compares to other vendors in security performance

View Risk Score →

Lighttpd LighttpdStack Overflow via Oversized Cookie Fields in lighttpd

Risk 61
Severity
9.8
EPSS
0.12%
First published (updated )
CVE-2026-22904

Lighttpd LighttpdStack Overflow via SESSIONID Cookie in lighttpd

Risk 61
Severity
9.8
EPSS
0.43%
First published (updated )
CVE-2026-22903

Lighttpd LighttpdHTTP Header Smuggling via Trailer Merge

Risk 66
Severity
9.1
First published (updated )
CVE-2025-12642

Trendnet TN-200TRENDnet TN-200 Lighttpd hard-coded key

Risk 26
Severity
2.9
EPSS
0.04%
First published (updated )
CVE-2025-8759

Lighttpd LighttpdSNORE Interface Unauthenticated Remote Code Execution

Risk 75
Severity
7.7
First published (updated )
CVE-2024-6198
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Lighttpd LighttpdUse-after-free vulnerabilities in lighttpd <= 1.4.50

Risk 27
Severity
5.3
First published (updated )
CVE-2018-25103

CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations

First published (updated )
https://seclists.org/oss-sec/2023/q4/95

debian/lighttpdA resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service …

Risk 43
Severity
7.5
First published (updated )
CVE-2022-41556

debian/lighttpdNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2022-37797

Lighttpd LighttpdLighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumptio…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-30780
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Debian Debian LinuxBuffer Overflow

Risk 35
Severity
5.9
First published (updated )
CVE-2022-22707

Lighttpd LighttpdInteger Overflow

Risk 86
Severity
9.8
First published (updated )
CVE-2019-11072

SUSE SUSE Linux Enterprise ServerPath Traversal

Risk 43
Severity
7.5
First published (updated )
CVE-2018-19052

Lighttpd Lighttpdmod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a bas…

Risk 43
Severity
7.5
First published (updated )
CVE-2015-3200

Debian Debian LinuxPath Traversal

Risk 26
Severity
5
First published (updated )
CVE-2014-2324
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Debian Debian LinuxSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2014-2323

Debian Debian Linuxlighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgrou…

Risk 67
Severity
7.6
First published (updated )
CVE-2013-4559

Debian Debian LinuxUse After Free

Risk 26
Severity
5
First published (updated )
CVE-2013-4560

Debian Debian LinuxWeak Encryption

Risk 43
Severity
7.5
First published (updated )
CVE-2013-4508

Lighttpd LighttpdRace Condition

Risk 12
Severity
1.9
First published (updated )
CVE-2013-1427
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Lighttpd LighttpdThe http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers…

Risk 26
Severity
5
First published (updated )
CVE-2012-5533

Debian Debian LinuxInteger signedness error in the base64_decode function in the HTTP authentication functionality (htt…

Risk 27
Severity
5
First published (updated )
CVE-2011-4362

Lighttpd LighttpdAn signedness error, leading to out of stack-based buffer read flaw was found in the way lighttpd, a…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-758624

Lighttpd Lighttpdlighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a requ…

Risk 26
Severity
5
First published (updated )
CVE-2010-0295

Lighttpd LighttpdInfoleak

Risk 52
Severity
7.5
First published (updated )
CVE-2008-4359
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Lighttpd LighttpdInfoleak

Risk 52
Severity
7.5
First published (updated )
CVE-2008-4360

Lighttpd LighttpdMemory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote …

Risk 26
Severity
5
First published (updated )
CVE-2008-4298

Lighttpd LighttpdThe connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x befo…

Risk 22
Severity
4.3
First published (updated )
CVE-2008-1531

Lighttpd LighttpdInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2008-1270

Lighttpd LighttpdInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2008-1111
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203