Known Vulnerabilities for Cherokee by Cherokee-project
Listed below are 8 of the newest known vulnerabilities associated with "Cherokee" by "Cherokee-project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-12845 json | Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated at... | 7.5 - HIGH | 2020-07-27 | 2022-11-29 |
| CVE-2019-20800 json | In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in hand... | 9.8 - CRITICAL | 2020-05-18 | 2022-11-21 |
| CVE-2019-20799 json | In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a ... | 7.5 - HIGH | 2020-05-18 | 2022-04-28 |
| CVE-2019-20798 json | An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed o... | 8.4 - HIGH | 2020-05-18 | 2022-11-21 |
| CVE-2014-4668 json | The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not p... | 6.8 - MEDIUM | 2014-07-02 | 2017-01-03 |
| CVE-2011-2191 json | Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack... | 6.8 - MEDIUM | 2011-10-07 | 2011-11-24 |
| CVE-2011-2190 json | The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number genera... | 2.1 - LOW | 2011-10-07 | 2012-05-14 |
| CVE-2009-4489 json | Not Provided | 2010-01-13 | 2026-04-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cherokee-project | Cherokee | 1.2.99 | |||
| Application | Cherokee-project | Cherokee | 1.2.98 | |||
| Application | Cherokee-project | Cherokee | 1.2.2 | |||
| Application | Cherokee-project | Cherokee | 1.2.104 | |||
| Application | Cherokee-project | Cherokee | 1.2.103 | |||
| Application | Cherokee-project | Cherokee | 1.2.102 | |||
| Application | Cherokee-project | Cherokee | 1.2.101 | |||
| Application | Cherokee-project | Cherokee | 1.2.0 | |||
| Application | Cherokee-project | Cherokee | 1.0.21 | |||
| Application | Cherokee-project | Cherokee | 1.0.18 | |||
| Application | Cherokee-project | Cherokee | 1.0.17 | |||
| Application | Cherokee-project | Cherokee | 1.0.16 | |||
| Application | Cherokee-project | Cherokee | 1.0.15 | |||
| Application | Cherokee-project | Cherokee | 1.0.14 | |||
| Application | Cherokee-project | Cherokee | 1.0.13 | |||
| Application | Cherokee-project | Cherokee | 1.0.12 | |||
| Application | Cherokee-project | Cherokee | 0.99.32 | |||
| Application | Cherokee-project | Cherokee | 0.99.31 | |||
| Application | Cherokee-project | Cherokee | 0.4.27 | |||
| Application | Cherokee-project | Cherokee | - |