Where
-Infinity
0

Lighttpd LighttpdStack Overflow via Oversized Cookie Fields in lighttpd

Risk 61
Severity
9.8
EPSS
0.12%
First published (updated )

Lighttpd LighttpdStack Overflow via SESSIONID Cookie in lighttpd

Risk 61
Severity
9.8
EPSS
0.43%
First published (updated )

Trendnet TN-200TRENDnet TN-200 Lighttpd hard-coded key

Risk 26
Severity
2.9
EPSS
0.04%
First published (updated )

Lighttpd LighttpdSNORE Interface Unauthenticated Remote Code Execution

Risk 75
Severity
7.7
First published (updated )

debian/lighttpdA resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service …

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SUSE SUSE Linux Enterprise ServerPath Traversal

Risk 43
Severity
7.5
First published (updated )

Debian Debian LinuxPath Traversal

Risk 26
Severity
5
First published (updated )

Debian Debian LinuxSQL Injection

Risk 86
Severity
9.8
First published (updated )

Lighttpd LighttpdRace Condition

Risk 12
Severity
1.9
First published (updated )

Lighttpd Lighttpdlighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a requ…

Risk 26
Severity
5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/1.4.18Buffer Overflow

Risk 48
Severity
6.8
First published (updated )

Lighttpd Lighttpdlighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service …

Risk 22
Severity
4.3
First published (updated )

Lighttpd Lighttpdmod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remot…

Risk 60
Severity
8.3
First published (updated )

Lighttpd Lighttpdrequest.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by …

Risk 35
Severity
5.8
First published (updated )

Lighttpd Lighttpdmod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of servic…

Risk 40
Severity
6.4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Lighttpd Lighttpdconnections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, w…

Risk 22
Severity
4.3
First published (updated )

Lighttpd Lighttpdlighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource co…

Risk 26
Severity
5
First published (updated )

Lighttpd LighttpdNull Pointer Dereference

Risk 44
Severity
7.8
First published (updated )

Lighttpd Lighttpdresponse.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote att…

Risk 26
Severity
5
First published (updated )

Lighttpd LighttpdLightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote att…

Risk 15
Severity
2.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Lighttpd LighttpdThe buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control charact…

Risk 26
Severity
5
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203