perception vulnerabilities

Products

• liteserve 5
• liteweb 2

Latest perception CVEs

Newest publication first

1. CVE-2002-2406 Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.

   Published 2007-11-01

   Medium·CVSS 5.0 EPSS 1.6%

   Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.

2. CVE-2002-2369 Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.

   Published 2007-10-31

   Medium·CVSS 5.0 EPSS 1.2%

   Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.

3. CVE-2007-3398 LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent pages.

   Published 2007-06-26

   Medium·CVSS 5.0 EPSS 2.8% PoC

   LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent pages.

4. CVE-2002-2192 Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query....

   Published 2005-11-16

   Medium·CVSS 4.3 EPSS 3.7% Public exploit

   Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a "dir" request to indexed folders.

5. CVE-2002-1986 Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").

   Published 2005-06-28

   Medium·CVSS 5.0 EPSS 6.7%

   Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").

6. CVE-2005-1908 Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL.

   Published 2005-06-08

   High·CVSS 7.5 EPSS 1.7%

   Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL.

7. CVE-2003-1144 Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name.

   Published 2005-05-10

   High·CVSS 10.0 EPSS 7.0%

   Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.