mod_wsgi vulnerabilities (Red Hat)
77 vulnerabilities.
mod_wsgiRed Hatlxml vulnerable to Cross-site Scripting6.1 Mediummod_wsgiRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalmod_wsgiRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highmod_wsgiRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highmod_wsgiRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediummod_wsgiRed HatImproper Input Validation in PyYAML9.8 Criticalmod_wsgiRed HatDeserialization of Untrusted Data in PyYAML9.8 Criticalmod_wsgiRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediummod_wsgiRed HatVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 Mediummod_wsgiRed HatRhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite8.6 Highmod_wsgiRed HatDouble Free in psutil7.5 Highmod_wsgiRed HatThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Mediummod_wsgiRed Hatqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 Highmod_wsgiRed HatForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 Mediummod_wsgiRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 Mediummod_wsgiRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 Mediummod_wsgiRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 Mediummod_wsgiRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 Mediummod_wsgiRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Mediummod_wsgiRed HatMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...5.0 Mediummod_wsgiRed HatUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...5.0 Mediummod_wsgiRed Hatmod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers...7.5 Highmod_wsgiRed HatThe mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle...6.2 Mediummod_wsgiRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Mediummod_wsgiRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 Mediummod_wsgiRed HatAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...4.3 Mediummod_wsgiRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium