Lucene search
+L

24 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•20 views

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was susceptible to a denial-of-service attack when used with very long strings...

7.5CVSS6.7AI score0.01606EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•9 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002185 advisory. The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource...

7.8CVSS7.1AI score0.03336EPSS
SaveExploits2References7
RedhatCVE
RedhatCVE
•added 2025/12/24 12:32 p.m.•13 views

CVE-2025-68551

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through = 3.2.24...

6.5CVSS5.9AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/23 12:15 p.m.•27 views

CVE-2025-68551

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through = 3.2.24...

6.5CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/23 11:46 a.m.•44 views

CVE-2025-68551 WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through = 3.2.24...

6.5CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/23 11:46 a.m.•27 views

CVE-2025-68551

Technical details about CVE-2025-68551 (VPSUForm v-form data exposure) are not present in the provided documents. No product/version/root cause/impact/fix information is available here; monitor for updates and vendor advisories.

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/23 12:00 a.m.•16 views

PT-2025-52738

Name of the Vulnerable Software and Affected Versions Vikas Ratudi VPSUForm versions through 3.2.24 Description A flaw exists in Vikas Ratudi VPSUForm that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to unauthorized access. The issue affects...

6.5CVSS6.4AI score0.0026EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/23 12:00 a.m.•17 views

WordPress plugin VPSUForm 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.2AI score0.0026EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 2:24 a.m.•19 views

CVE-2023-34005

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

8.8CVSS7.1AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•25 views

WordPress plugin Photo Gallery, Images, Slider in Rbs Image Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

4.8CVSS4.8AI score0.00312EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2024/02/07 12:00 a.m.•36 views

Django < 3.2.24, 4.x < 4.2.10, 5.x < 5.0.2 DoS Vulnerability - Windows

Django is prone to a denial of service DoS vulnerability in the intcomma template filter. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.5AI score0.01606EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/06 10:16 p.m.•7 views

DEBIAN-CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.6AI score0.01606EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/06 12:00 a.m.•27 views

Django Security Vulnerabilities

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, and more. Django has a security vulnerability. An attacker exploited the vulnerability to cause a denial of...

7.5CVSS6.6AI score0.01606EPSS
SaveExploits0References7
OSV
OSV
•added 2023/07/17 3:15 p.m.•19 views

CVE-2023-34005

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

8.8CVSS5.8AI score0.00318EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/07/17 2:46 p.m.•23 views

CVE-2023-34005 WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

6.5CVSS7.1AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/07/17 12:00 a.m.•17 views

WordPress Plugin Front End Users 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•8 views

CVE-2023-34005: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Etoile Web Design Front End Users plugin = 3.2.24 versions...

8.8CVSS7.8AI score0.00318EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:29 a.m.•10 views

SUSE CVE-2014-2488

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core...

1CVSS6AI score0.00321EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/07 9:15 a.m.•8 views

CVE-2021-25087

The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords fixed in 3.2.24 and files Master Keys fixed ...

7.5CVSS7.1AI score0.01516EPSS
SaveExploits2References2
OSV
OSV
•added 2014/07/17 11:17 a.m.•21 views

UBUNTU-CVE-2014-4261

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than...

6.9CVSS5.7AI score0.00392EPSS
SaveExploits0References3
Rows per page
Query Builder