Known vulnerabilities in Cherokee webserver
Vendor:
Cherokee-project
Software:
Cherokee webserver
Software CPE:
cpe:2.3:a:cherokee-project:cherokee:*:*:*:*:*:*:*:*
Website:
https://cherokee-project.com/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU49164 - NULL Pointer Dereference CVE-2020-12845 |
CWE-476 | Medium | - | 28.07.2020 |
SB2019072222 SB2020122816 |
||
| #VU49161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-20798 |
CWE-79 | Medium | - | 18.05.2020 |
SB2019072222 SB2020122816 |
||
| #VU49162 - Memory corruption CVE-2019-20799 |
CWE-119 | Medium | - | 18.05.2020 |
SB2019072222 SB2020122816 |
||
| #VU49163 - Out-of-bounds write CVE-2019-20800 |
CWE-787 | High | - | 18.05.2020 |
SB2019072222 SB2020122816 |
||
| #VU19366 - Buffer overflow CVE-2019-1010218 |
CWE-120 | Medium | - | 25.07.2019 |
SB2019072222 |
||
| #VU49160 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2006-1681 |
CWE-79 | Medium | - | 11.04.2006 |
SB2006041101 SB2020122816 |