| CVE-2022-24761 |
high |
— |
8.0 |
|
|
|
4y ago |
Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the… |
| CVE-2024-49768 |
unknown |
— |
— |
|
|
|
2y ago |
Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recv_bytes (defaults to 8192) long, followed by a secondary request using HTTP… |
| CVE-2024-49769 |
unknown |
— |
— |
|
|
|
2y ago |
Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won't correctly… |
| CVE-2022-31015 |
unknown |
— |
— |
|
|
|
4y ago |
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call sel… |
| CVE-2020-5236 |
unknown |
— |
— |
|
|
|
6y ago |
Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regula… |
| CVE-2019-16789 |
unknown |
— |
— |
|
|
|
7y ago |
In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress lead… |
| CVE-2019-16792 |
unknown |
— |
— |
|
|
|
7y ago |
Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now c… |
| CVE-2019-16786 |
unknown |
— |
— |
|
|
|
7y ago |
Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header … |
| CVE-2019-16785 |
unknown |
— |
— |
|
|
|
7y ago |
Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize… |