Gnome Dwarf Http Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Gnome Dwarf Http Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2006-0820gnomedwarf_http_server
EPSS score
1.37%
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.7.8CVE-2006-0819gnomedwarf_http_server
EPSS score
2.27%
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.