TI-2026-05070 CVE-2026-5789 · GHSA-9vxj-j2f7-9mgg
Search path without quotes in CivetWeb
Priority LOW 38
Vulnerability related to an unquoted search path in CivetWeb v1.16.
Vulnerabilities
4 records
TI-2025-35177 CVE-2025-55763 · GHSA-2757-2hpv-v482
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote…
Priority HIGH 66
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request.
TI-2020-16622 CVE-2020-27304 · GHSA-wphm-mh7c-38cf
Path traversal in civetweb_project civetweb
Priority MEDIUM 48
The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API.
TI-2018-09103 CVE-2018-12684 · GHSA-v8q9-6423-3jq2
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10…
Priority LOW 33
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.