← Back

Nostromo

nostromo

Vendor: Nazgul • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-48253
1Nazgul
1Nostromo
Jun 17, 2026
Jan 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.
CVE-2011-0751
1Nazgul
1Nostromo
Apr 29, 2026
Mar 16, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.