Cherokee

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-12845 Jul 27, 23:15 HIGH POC This Week

Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Cherokee Cherokee Project

NVD GitHub

CVSS 3.1

7.5

EPSS

3.2%

CVE-2014-4668 Jul 02, 04:14 MEDIUM This Month

The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Fedora Mageia Cherokee Fedoraproject +2

NVD GitHub

CVSS 2.0

6.8

EPSS

0.6%

CVE-2020-12845

EPSS 3% CVSS 7.5

HIGH POC This Week

Denial Of Service Null Pointer Dereference Cherokee +1

NVD GitHub

CVE-2014-4668

EPSS 1% CVSS 6.8

MEDIUM This Month

Authentication Bypass Fedora Mageia +4

NVD GitHub