TI-2024-04819 CVE-2024-5193 · GHSA-f49h-4f4j-3rjc
Ritlabs TinyWeb Server Request crlf injection
Priority HIGH 70
A security vulnerability has been detected in Ritlabs TinyWeb Server 1.94.
maximmasiutin
Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
maximmasiutin records in CISA KEVNo maximmasiutin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Tinyweb · all components
TI-2026-18299 CVE-2026-22781
TinyWeb CGI Command Injection
Priority MEDIUM 53
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2026-21999 CVE-2026-27613
CGI Parameter Injection (Bypass of STRICT_CGI_PARAMS and EscapeShellParam)
Priority MEDIUM 50
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
Priority MEDIUM 47
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
Priority MEDIUM 46
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2024-22622 CVE-2024-34199 · GHSA-wx4f-9wf4-26p4
TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of…
Priority MEDIUM 46
TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large elements in the request line.
Priority LOW 38
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TI-2026-22012 CVE-2026-27630
TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris)
Priority LOW 38
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.