embedthis vulnerabilities
5 published CVEs name embedthis among the affected products.
- 5Published CVEs5 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter.
EmbedThis · GoAhead
High7.2 - CVE-2024-3187
This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not…
EmbedThis · GoAhead
Medium5.9 - CVE-2024-3186
CWE-476 NULL Pointer Dereference vulnerability in the evalExpr() function of GoAhead Web Server (version <= 6.0.0) when compiled with the ME_GOAHEAD_JAVASCRIPT…
EmbedThis · GoAhead
Medium5.3 - CVE-2024-3184
Multiple CWE-476 NULL Pointer Dereference vulnerabilities were found in GoAhead Web Server up to version 6.0.0 when compiled with the ME_GOAHEAD_REPLACE_MALLOC…
EmbedThis · GoAhead
Medium5.9 - CVE-2021-43298
The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting. This means that…
embedthis · goahead
Critical9.8