Vendor

valenok vulnerabilities

2 published CVES affecting valenok, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 1
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Atom feed of valenok alerts

Products

mongoose 2

Latest valenok CVEs

Newest publication first

CVE-2011-2900 Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function....
Published 2011-08-05

HighCVSS 7.5 EPSS 13.3% Public exploit PoC

Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arb...
CVE-2009-4535 Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.
Published 2009-12-31

MediumCVSS 5.0 EPSS 6.7% Public exploit

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

valenok vulnerabilities

Products

Latest valenok CVEs

CVE-2011-2900 Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function....

CVE-2009-4535 Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.