Vendors / Embedthis Records 26 All Threatist records
Exploited (KEV) 1
CVSS critical 6
CVSS high 15
Exploited now Embedthis records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 56
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.56191 · Published 2015-03-31 · No fix listed CWE-476
Priority MEDIUM 55
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.2279 · Published 2018-03-14 · No fix listed CWE-287
Priority LOW 38
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02766 · Published 2018-08-18 · No fix listed CWE-476
Priority LOW 37
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02227 · Published 2018-08-18 · No fix listed CWE-476
Priority LOW 36
An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01548 · Published 2022-06-01 · No fix listed CWE-476
Priority LOW 36
Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01328 · Published 2020-07-13 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
6 15 5 0 0
THREATIST.IORead the docs