Vendors / Valenok Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Valenok records in CISA KEV No Valenok vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simpl…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.13256 · Published 2011-08-05 · No fix listed CWE-119
Priority LOW 32
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06677 · Published 2009-12-31 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0