Vendors / Unix4lyfe Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Unix4lyfe records in CISA KEV No Unix4lyfe vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01055 · Published 2024-01-22 · No fix listed CWE-203
Priority LOW 36
A flaw was found in darkhttpd.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01316 · Published 2022-04-01 · No fix listed CWE-755
Priority LOW 24
darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2024-01-22 · No fix listed
Open these records in search → All records by CVSS severity
1 1 1 0 0
