networkactiv vulnerabilities

Products

• networkactiv web server 3
• web server 1

Latest networkactiv CVEs

Newest publication first

1. CVE-2018-25235 NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS

   Published 2026-03-30

   Medium·CVSS 6.9 EPSS 0.22%

   NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by entering a crafted usernam...

2. CVE-2006-0815 NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward slash) after the file extension.

   Published 2006-03-06

   Medium·CVSS 5.0 EPSS 1.6%

   NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward slash) after the file extension.

3. CVE-2005-2453 Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via t...

   Published 2005-08-04

   Medium·CVSS 4.3 EPSS 2.0%

   Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the query string.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.