Lucene search
+L

179 matches found

UbuntuCve
UbuntuCve
added 2018/02/26 10:29 p.m.26 views

CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS7.1AI score0.69907EPSS
SaveExploits5References3
OSV
OSV
added 2018/02/26 10:29 p.m.5 views

UBUNTU-CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS7.1AI score0.69907EPSS
SaveExploits5References4
PyPA
PyPA
added 2018/02/26 10:29 p.m.7 views

PYSEC-2018-78

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS6.9AI score0.69907EPSS
SaveExploits5References4Affected Software1
vulnersOsv
vulnersOsv
added 2018/02/26 10:29 p.m.4 views

liveprofiler (>=0.2.0 <=1.0.0), prediction (=0.0.3) potentially affected by CVE-2018-7490 via uwsgi (>=2.0.13.1 <=2.0.15)

uwsgi PYPI version =2.0.13.1, =0.2.0, =1.0.0 - prediction =0.0.3 Source cves: CVE-2018-7490 Source advisory: OSV:PYSEC-2018-78...

7.5CVSS7.1AI score0.69907EPSS
SaveExploits5
OSV
OSV
added 2018/02/26 10:29 p.m.3 views

DEBIAN-CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS7.6AI score0.69907EPSS
SaveExploits5References1
OSV
OSV
added 2018/02/26 10:29 p.m.4 views

ALPINE-CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS6.9AI score0.69907EPSS
SaveExploits5References1
OSV
OSV
added 2018/02/26 10:29 p.m.24 views

CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS7.1AI score
SaveExploits0References3
OSV
OSV
added 2018/02/26 10:29 p.m.24 views

PYSEC-2018-78

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS4AI score0.69907EPSS
SaveExploits5References4
Cvelist
Cvelist
added 2018/02/26 10:0 p.m.28 views

CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5AI score0.69907EPSS
SaveExploits5References3
Debian CVE
Debian CVE
added 2018/02/26 10:0 p.m.76 views

CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS7.6AI score0.69907EPSS
SaveExploits5
AlpineLinux
AlpineLinux
added 2018/02/26 10:0 p.m.89 views

CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

7.5CVSS7.6AI score0.69907EPSS
SaveExploits5
CVE
CVE
added 2018/02/26 10:0 p.m.152 views

CVE-2018-7490

CVE-2018-7490 affects the uWSGI PHP plugin before 2.0.17, where the PHP-DOCROOT validation fails, enabling directory traversal via the --php-docroot option and potentially exposing sensitive files outside the web root. Evidence in connected docs shows Debian security advisories fixing to versions...

7.5CVSS7.4AI score0.69907EPSS
SaveExploits5References3Affected Software1
Positive Technologies
Positive Technologies
added 2018/02/26 12:0 a.m.6 views

PT-2018-18100 · Uwsgi +1 · Uwsgi +1

Name of the Vulnerable Software and Affected Versions: uWSGI versions prior to 2.0.17 Description: The issue arises from the mishandling of a DOCUMENT ROOT check during the use of the --php-docroot option, allowing directory traversal. Recommendations: For versions prior to 2.0.17, update to...

9.8CVSS8.4AI score0.69907EPSS
SaveExploits5References24
Veracode
Veracode
added 2018/02/23 6:34 a.m.22 views

Denial Of Service (DoS)

uWSGI is vulnerable to denial of service DoS attacks. The application does not properly validate the directory length, allowing a malicious user to cause a buffer-overflow and crash the application...

9.8CVSS8AI score0.02047EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2018/02/20 12:0 a.m.20 views

Debian: Security Advisory (DLA-1275-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.02047EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/02/14 12:0 a.m.22 views

FreeBSD : uwsgi -- a stack-based buffer overflow (a8f25565-109e-11e8-8d41-97657151f8c2)

Uwsgi developers report : It was discovered that the uwsgiexpandpath function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial-of-service application crash or stack corruption. C Tenable Network...

9.8CVSS8.3AI score0.02047EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2018/02/12 12:0 a.m.25 views

Debian DLA-1275-1 : uwsgi security update

It was discovered that the uwsgiexpandpath function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial of service application crash or stack corruption. For Debian 7 'Wheezy', these problems have been...

9.8CVSS8.3AI score0.02047EPSS
SaveExploits0References3
Debian
Debian
added 2018/02/10 10:1 p.m.40 views

[SECURITY] [DLA 1275-1] uwsgi security update

Package : uwsgi Version : 1.2.3+dfsg-5+deb7u2 CVE ID : CVE-2018-6758 Debian Bug : 889753 It was discovered that the uwsgiexpandpath function in utils.c in Unbit uWSGI, an application container server, has a stack-based buffer overflow via a large directory length that can cause a denial-of-servic...

9.8CVSS9.7AI score0.02047EPSS
SaveExploits0
OSV
OSV
added 2018/02/10 12:0 a.m.16 views

DLA-1275-1 uwsgi - security update

Bulletin has no description...

9.8CVSS9.3AI score0.02047EPSS
SaveExploits0
CNVD
CNVD
added 2018/02/07 12:0 a.m.4 views

Unbit uWSGI Stack Buffer Overflow Vulnerability

Unbit uWSGI is a set of open source application server that supports multiple languages . A stack buffer overflow vulnerability exists in the 'uwsgiexpandpath' function in the core/utils.c file in Unbit uWSGI 2.0.15 and earlier. An attacker can exploit this vulnerability to cause stack corruption...

9.8CVSS7.4AI score0.02047EPSS
SaveExploits0References1
Rows per page
Query Builder