Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Unbit Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-6758 1 Unbit 1 Uwsgi 2020-08-24 7.5 HIGH 9.8 CRITICAL
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.
CVE-2018-7490 2 Debian, Unbit 2 Debian Linux, Uwsgi 2018-03-23 5.0 MEDIUM 7.5 HIGH
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.