Advisories · Technology
EmbedThis GoAhead.
Every CVE that names EmbedThis GoAhead among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Cross-site scripting in EmbedThis GoAhead
- EmbedThis GoAhead
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
Use after free in EmbedThis GoAhead
- EmbedThis GoAhead
- Memory corruption
- CVSS 5.3 Medium
NULL pointer dereference in EmbedThis GoAhead
- EmbedThis GoAhead
- Memory corruption
- CVSS 5.9 Medium
NULL pointer dereference in EmbedThis GoAhead
- EmbedThis GoAhead
- Memory corruption
-
The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting.
- embedthis goahead
- CWE-208