Filter
-Infinity
0
Trending
Fipsasp Fipscms LightUse-after-free vulnerabilities in lighttpd <= 1.4.50
5.3
First published (updated )
CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations
First published (updated )
debian/lighttpdA resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service …
7.5
First published (updated )
Fipsasp Fipscms LightLighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumptio…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fipsasp Fipscms Lightmod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a bas…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debianlighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgrou…
7.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fipsasp Fipscms LightThe http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers…
First published (updated )
DebianInteger signedness error in the base64_decode function in the HTTP authentication functionality (htt…
First published (updated )
Fipsasp Fipscms LightAn signedness error, leading to out of stack-based buffer read flaw was found in the way lighttpd, a…
First published (updated )
Fipsasp Fipscms Lightlighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a requ…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fipsasp Fipscms LightMemory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote …
First published (updated )
Fipsasp Fipscms LightThe connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x befo…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fipsasp Fipscms Lightlighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a…
First published (updated )
Fipsasp Fipscms Lightlighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service …
4.3
First published (updated )
Fipsasp Fipscms Lightmod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remot…
8.3
First published (updated )
Fipsasp Fipscms Lightrequest.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by …
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.