Cherokee-project vulnerabilities

Products

• Cherokee 8

Newest

• cherokee-project cherokee Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences.... CVE-2020-12845 Fix available 7.5 HighJuly 27, 2020
• cherokee-project cherokee An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested... CVE-2019-20798 8.4 HighMay 17, 2020
• cherokee-project cherokee In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker... CVE-2019-20799 7.5 HighMay 17, 2020
• cherokee-project cherokee In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in... CVE-2019-20800 9.8 CriticalMay 17, 2020
• cherokee webserver latest cherokee web server, cherokee-project cherokee web server +1 more Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected... CVE-2019-1010218 7.5 HighJuly 22, 2019
• cherokee-project cherokee, fedoraproject fedora, mageia project mageia +2 more The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier,... CVE-2014-4668 Fix available 6.8 MediumJuly 2, 2014
• cherokee-project cherokee Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99... CVE-2011-2191 6.8 MediumOctober 7, 2011
• cherokee-project cherokee The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for... CVE-2011-2190 2.1 LowOctober 7, 2011
• cherokee-project cherokee header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable... CVE-2009-4489 Public exploit 5.0 MediumJanuary 13, 2010