Embedthis vulnerabilities

Products

• Goahead 21
• Appweb 6

Newest

• embedthis goahead goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter. CVE-2023-53155 7.2 HighJuly 25, 2025
• embedthis goahead This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in... CVE-2024-3187 5.9 MediumOctober 17, 2024
• embedthis goahead CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server ... CVE-2024-3186 5.3 MediumOctober 17, 2024
• embedthis goahead Multiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead Web Server up to... CVE-2024-3184 5.9 MediumOctober 17, 2024
• embedthis goahead websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation... CVE-2021-41615 9.8 CriticalAugust 8, 2022
• embedthis appweb An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows... CVE-2021-33254 7.5 HighJune 1, 2022
• embedthis goahead The code that performs password matching when using 'Basic' HTTP authentication does not use a... CVE-2021-43298 9.8 CriticalJanuary 25, 2022
• embedthis goahead An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form... CVE-2021-42342 Public exploit EPSS 59.5% 9.8 CriticalOctober 14, 2021
• embedthis goahead GoAhead before 5.1.2 mishandles the nonce value during Digest authentication. This may permit... CVE-2020-15688 8.8 HighJuly 23, 2020
• embedthis appweb Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request... CVE-2020-15689 7.5 HighJuly 13, 2020
• embedthis goahead An exploitable code execution vulnerability exists in the processing of multi-part/form-data... CVE-2019-5096 Public exploit EPSS 67.0% 9.8 CriticalDecember 3, 2019
• embedthis goahead A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in... CVE-2019-5097 EPSS 45.1% 5.3 MediumDecember 3, 2019
• embedthis goahead Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The... CVE-2019-19240 5.3 MediumNovember 22, 2019
• embedthis goahead An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and... CVE-2019-16645 Public exploit 8.6 HighSeptember 20, 2019
• embedthis goahead In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability... CVE-2019-12822 7.5 HighJune 14, 2019
• embedthis appweb, goahead, juniper junos +2 more An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST... CVE-2018-15505 7.5 HighAugust 18, 2018
• embedthis appweb, goahead, juniper junos +2 more An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server... CVE-2018-15504 7.5 HighAugust 18, 2018
• embedthis appweb The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the... CVE-2018-8715 Public exploit EPSS 22.8% 8.1 HighMarch 14, 2018
• embedthis goahead EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI... CVE-2017-1000471 9.8 CriticalJanuary 3, 2018
• embedthis goahead web server EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in... CVE-2017-1000470 7.5 HighJanuary 3, 2018
• embedthis goahead, oracle integrated lights out manager +1 more Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program... CVE-2017-17562 In KEVPublic exploit EPSS 97.1% 8.1 HighDecember 12, 2017
• embedthis goahead GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http... CVE-2017-14149 7.5 HighSeptember 5, 2017
• embedthis goahead A command-injection vulnerability exists in a web application on a custom-built GoAhead web... CVE-2017-5675 8.8 HighMarch 13, 2017
• embedthis goahead A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white... CVE-2017-5674 EPSS 21.6% 9.8 CriticalMarch 13, 2017
• embedthis goahead EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . ... CVE-2014-9707 EPSS 28.2% 7.5 HighMarch 31, 2015
• embedthis appweb, juniper junos, oracle enterprise communications broker +2 more Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of... CVE-2014-9708 EPSS 56.2% 5.0 MediumMarch 31, 2015