weborf project vulnerabilities

Products

• weborf 2

Latest weborf project CVEs

Newest publication first

1. CVE-2023-46586 cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused.

   Published 2024-10-09

   Critical·CVSS 9.1 EPSS 0.63%

   cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused.

2. CVE-2011-0529 Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.

   Published 2019-11-20

   High·CVSS 7.5 EPSS 1.3%

   Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.