TI-2024-04819 CVE-2024-5193 · GHSA-f49h-4f4j-3rjc
Ritlabs TinyWeb Server Request crlf injection
Priority HIGH 70
A security vulnerability has been detected in Ritlabs TinyWeb Server 1.94.
maximmasiutin
Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
maximmasiutin records in CISA KEVNo maximmasiutin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
17 records
TI-2026-18299 CVE-2026-22781
TinyWeb CGI Command Injection
Priority MEDIUM 53
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2026-21999 CVE-2026-27613
CGI Parameter Injection (Bypass of STRICT_CGI_PARAMS and EscapeShellParam)
Priority MEDIUM 50
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
Priority MEDIUM 47
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
Priority MEDIUM 46
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2024-22622 CVE-2024-34199 · GHSA-wx4f-9wf4-26p4
TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of…
Priority MEDIUM 46
TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large elements in the request line.
TI-2006-00893 CVE-2006-0918 · GHSA-fvgq-fp4x-gvcr
Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field.
Priority LOW 39
Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field.
Priority LOW 38
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2026-22012 CVE-2026-27630
TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris)
Priority LOW 38
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2001-00391 CVE-2001-0398 · GHSA-2c6r-pj43-h4x3
The BAT! mail client allows remote attackers to bypass user warnings of an executable…
Priority LOW 37
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrep…
TI-2026-10492 CVE-2026-12200 · GHSA-gpg8-377c-3rgp
Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow
Priority LOW 36
A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32.
TI-2017-12946 CVE-2017-17689 · GHSA-xv45-9768-g2mm
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack…
Priority LOW 33
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
TI-2002-00327 CVE-2002-0338 · GHSA-gf65-8rx5-cg87
The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to…
Priority LOW 29
The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.
TI-2001-00648 CVE-2001-0675 · GHSA-2r4r-h566-5q6r
Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of…
Priority LOW 29
Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return <CR> that is not followed by a line feed <LF>.
TI-2006-00609 CVE-2006-0630 · GHSA-r8jw-rfx3-cj99
RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated…
Priority LOW 26
RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the real headers, which is in violation of RFC2046 header merging rules and allows r…
TI-2001-00649 CVE-2001-0676 · GHSA-94ff-m62p-rpc5
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows…
Priority LOW 26
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment.
TI-2003-01036 CVE-2003-1133 · GHSA-m8pr-fx85-4wpw
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs…
Priority LOW 12
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages.