pmsoftware simple web server vulnerabilities

Latest pmsoftware simple web server CVEs

Newest publication first

1. CVE-2012-10053 Simple Web Server Connection Header Buffer Overflow

   Published 2025-08-08

   Critical·CVSS 9.3 EPSS 1.9% Framework module

   Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP header. When a remote attacker sends an overly long string in this header, the server uses vsprintf() without proper bounds checking, leading to a buffer overflow...

2. CVE-2005-1173 Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request.

   Published 2005-05-02

   High·CVSS 7.5 Public exploit

   Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.