uwsgi

5 results · Feed

• Medium 6.3
  CVE-2024-24795

  Apache HTTP Server: HTTP Response Splitting in multiple modules

  HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixe…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 4, 2024
• Unscored —
  CVE-2021-36160 EPSS 64%

  mod_proxy_uwsgi out of bound read

  A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Sep 16, 2021
• Unscored —
  CVE-2020-11984 Public exploit EPSS 90%

  Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

  apache2 apache2 apache2 uwsgi Debian Ubuntu Alpine
  Aug 7, 2020
• High 7.5
  CVE-2018-7490 Public exploit EPSS 69%

  uWSGI Directory Traversal vulnerability

  uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

  uwsgi uwsgi uwsgi uwsgi Debian Ubuntu Alpine PyPI
  Feb 26, 2018
• Unscored —
  CVE-2018-6758

  The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a la…

  uwsgi uwsgi uwsgi Debian Ubuntu Alpine
  Feb 6, 2018