← Back

Nazgul

nazgul

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Nostromo
nostromo

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nazgul
1Nostromo
Jun 17, 2026
Jan 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.
1Nazgul
1Nostromo Nhttpd
Jun 17, 2026
Oct 14, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request.
1Nazgul
1Nostromo Nhttpd
Jun 17, 2026
Oct 14, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.
1Nazgul
1Nostromo
Apr 29, 2026
Mar 16, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.