https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2003-1032.htmlhttps://patchthecve.com/cve/CVE-2003-1032.htmlTue, 16 Jun 2026 22:03:23 +0000MEDIUM 5.0: Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.https://patchthecve.com/cve/CVE-2003-0276.htmlhttps://patchthecve.com/cve/CVE-2003-0276.htmlTue, 16 Jun 2026 22:01:53 +0000MEDIUM 5.0: Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.https://patchthecve.com/cve/CVE-2002-0433.htmlhttps://patchthecve.com/cve/CVE-2002-0433.htmlTue, 16 Jun 2026 21:57:26 +0000MEDIUM 5.0: Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.https://patchthecve.com/cve/CVE-2002-0142.htmlhttps://patchthecve.com/cve/CVE-2002-0142.htmlTue, 16 Jun 2026 21:56:52 +0000HIGH 7.5: CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.https://patchthecve.com/cve/CVE-2001-0303.htmlhttps://patchthecve.com/cve/CVE-2001-0303.htmlTue, 16 Jun 2026 21:54:03 +0000MEDIUM 5.0: tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file.https://patchthecve.com/cve/CVE-2001-0302.htmlhttps://patchthecve.com/cve/CVE-2001-0302.htmlTue, 16 Jun 2026 21:54:03 +0000MEDIUM 5.0: Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL.