Every CVE whose affected-product data names Soft3304 04webserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (9)
CVE-2006-4200 — CVSS 7.5 (high): Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors…
CVE-2006-4199 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or…
CVE-2004-1514 — CVSS 5.0 (medium): 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device…
CVE-2002-2216 — CVSS 5.0 (medium): Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive…
CVE-2004-2662 — CVSS 5.0 (medium): Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data…
CVE-2005-1416 — CVSS 5.0 (medium): Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the…
CVE-2004-2661 — CVSS 5.0 (medium): Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI…
CVE-2004-1513 — CVSS 5.0 (medium): 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return…
CVE-2004-1512 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web…