Known vulnerabilities in GoAhead

Known vulnerabilities in GoAhead

Vendor: EmbedThis

Software: GoAhead

Software CPE: cpe:2.3:a:embedthis:goahead:*:*:*:*:*:*:*:*

Website: https://www.embedthis.com/

Total vulnerabilities: 10

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU23341 - Buffer over-read CVE-2019-19240	CWE-126	Medium	No	No	5.0.1	03.12.2019	SB2019112220
#VU23340 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2019-5097	CWE-835	Medium	No	No	5.1.0	03.12.2019	SB2019120306 SB2023012726 SB2023012727
#VU23339 - Use After Free CVE-2019-5096	CWE-416	High	Available	No	5.1.0	03.12.2019	SB2019120306 SB2023012726
#VU35485 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2019-16645	CWE-74	High	No	No	-	20.09.2019	SB2019092019
#VU19147 - NULL Pointer Dereference CVE-2018-15505	CWE-476	Medium	No	No	4.0.1	11.07.2019	SB2018081802
#VU19146 - NULL Pointer Dereference CVE-2018-15504	CWE-476	Medium	No	No	4.0.1	11.07.2019	SB2018081801
#VU18826 - Resource Management Errors CVE-2019-12822	CWE-399	Low	No	No	4.1.1, 5.0.1	19.06.2019	SB2019061901
#VU37712 - NULL Pointer Dereference CVE-2017-1000471	CWE-476	High	No	No	-	03.01.2018	SB2018010311
#VU38358 - NULL Pointer Dereference CVE-2017-14149	CWE-476	Medium	No	No	-	05.09.2017	SB2017090518
#VU40857 - Heap-based Buffer Overflow CVE-2014-9707	CWE-122	Medium	Available	No	-	31.03.2015	SB2015033105