Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.
Search vulnerabilities
CVE-2006-5216
CVSS 2.0 · 7.5 High
EPSS 64.2%
KEV · Not listed
Vendors
Products
CVE-2007-3407
Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20).
CVSS 2.0 · 5.0 Medium
EPSS 8.4%
KEV · Not listed
Vendors
Products
CVE-2007-6326
Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
CVSS 2.0 · 5.0 Medium
EPSS 7.3%
KEV · Not listed
Vendors
Products
CVE-2009-1354
Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS 2.0 · 4.0 Medium
EPSS 2.3%
KEV · Not listed
Vendors
Products
CVE-2009-4530
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI.
CVSS 2.0 · 5.0 Medium
EPSS 1.2%
KEV · Not listed
Vendors
Products
Page 1 of 1.