Vendors / Perception Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Perception records in CISA KEV No Perception vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07046 · Published 2005-05-10 · No fix listed
Priority LOW 36
Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01721 · Published 2005-06-08 · No fix listed
Priority LOW 32
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06685 · Published 2005-06-28 · No fix listed
Priority LOW 28
LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent pages.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02817 · Published 2007-06-26 · No fix listed
Priority LOW 26
Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01596 · Published 2007-11-01 · No fix listed CWE-20
Priority LOW 26
Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a "dir" re…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03686 · Published 2005-11-16 · No fix listed
Priority LOW 25
Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01218 · Published 2007-10-31 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
Critical1 High1 Medium5 Low0 No CVSS0