Weston-embedded Uc-http — known CVE vulnerabilities

Every CVE whose affected-product data names Weston-embedded Uc-http, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-45318 — CVSS 10.0 (critical): A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A…
• CVE-2023-25181 — CVSS 9.0 (critical): A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted…
• CVE-2023-27882 — CVSS 9.0 (critical): A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A…
• CVE-2023-28391 — CVSS 9.0 (critical): A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially…
• CVE-2023-31247 — CVSS 9.0 (critical): A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A…
• CVE-2023-28379 — CVSS 9.0 (critical): A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially…
• CVE-2023-24585 — CVSS 7.7 (high): An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted…