Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2023-26142 All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values ar… Crow No fix yet Fix from $1,6002023-09-12 CRITICAL 9.8 CVE-2022-38667 HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. The HTTP parser s… Crow after 1.0 Fix from $2,3002022-08-22 HIGH 7.5 CVE-2022-38668 HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a reque… Crow Patch available Fix from $1,9502022-08-22 CRITICAL 9.8 CVE-2022-34970 Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows … Crow 1.0+ Fix from $2,3002022-08-04 MEDIUM 6.1 CVE-2021-23824 This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipulate the input to introduce a… Crow 0.3+ Fix from $1,6002022-01-13 HIGH 7.5 CVE-2021-23514 This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server. Crow 0.3+ Fix from $1,9502022-01-13