Boa vulnerabilities

Products

• Boa 9
• Webserver 3

Newest

• boa webserver, boa web server 0.94.14rc21 +1 more Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-47916 7.5 HighNovember 14, 2024
• boa Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects CVE-2024-43367 Fix available 7.5 HighAugust 14, 2024
• boa Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint... CVE-2022-45956 5.3 MediumDecember 12, 2022
• boa Boa 0.94.14rc21 is vulnerable to SQL Injection via username. CVE-2022-44117 Disputed 9.8 CriticalNovember 23, 2022
• boa Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration... CVE-2021-33558 Public exploitDisputed EPSS 12.3% 7.5 HighMay 27, 2021
• boa Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls... CVE-2018-21028 7.5 HighOctober 11, 2019
• boa Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition... CVE-2018-21027 9.8 CriticalOctober 11, 2019
• boa /cgi-bin/wapopen in BOA Webserver 0.94.14rc21 allows the injection of "../.." using the... CVE-2017-9833 Public exploitDisputed EPSS 68.5% 7.5 HighJune 24, 2017
• boa Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an... CVE-2016-9564 7.5 HighNovember 30, 2016
• boa Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which... CVE-2009-4496 Public exploit EPSS 12.4% 5.0 MediumJanuary 13, 2010
• boa webserver The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other... CVE-2007-4915 Public exploit EPSS 68.2% 10.0 HighSeptember 17, 2007
• boa webserver Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers... CVE-2000-0920 Public exploit 5.0 MediumDecember 19, 2000