Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority MEDIUM 64

NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying an excessively long string.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00225 Published 2026-03-30 No fix listed CWE-787
Priority LOW 24

Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the query string.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01965 Published 2005-08-04 No fix listed