This page aggregates publicly disclosed CVE and security risk information related to brs, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2003-1165 | Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header. | [email protected] | 5.0 | 18.57% | 2003-12-31 | 2026-04-16 |
| CVE-2003-0409 | Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request. | [email protected] | 10.0 | 14.80% | 2003-06-30 | 2026-04-16 |
| CVE-2002-1546 | BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence. | [email protected] | 7.5 | 0.43% | 2003-03-31 | 2026-04-16 |
| CVE-2001-0453 | Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories. | [email protected] | 5.0 | 0.89% | 2001-06-27 | 2026-04-16 |
| CVE-2001-0452 | BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command. | [email protected] | 5.0 | 5.25% | 2001-06-27 | 2026-04-16 |