CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

PYSEC-2022-19

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5269-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5269-1 advisory. Keryn Knight discovered that Django incorrectly handled certain template tags. A remote attacker could possibly use this issue to perform a...

CVE-2022-22818: Improper Neutralization of Input During Web Page Generation

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

UBUNTU-CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

PT-2022-1456

Name of the Vulnerable Software and Affected Versions Django versions 2.2 before 2.2.27 Django versions 3.2 before 3.2.12 Django versions 4.0 before 4.0.2 Description The % debug % template tag in Django does not properly encode the current context, which may lead to XSS. This issue is related to...

Django cross-site scripting vulnerabilities

Django is the Django Foundation's set of open source web application framework based on the Python language. The framework includes an object-oriented mapper, view system, template system, etc. A cross-site scripting vulnerability exists in Django, which stems from the product's % debug %...

Path traversal

Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24;...

CVE-2021-40338 OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24;...

CVE-2021-40338

Hitachi Energy LinkOne WebView is affected by CVE-2021-40338 due to a web server misconfiguration that enables debug mode and reveals the full filesystem directory path when errors occur during a query. Affected versions are LinkOne WebView 3.20, 3.22, 3.23, 3.24, 3.25, and 3.26. The issue can di...

PT-2022-11217 · Hitachi Energy · Hitachi Energy Linkone

Name of the Vulnerable Software and Affected Versions: Hitachi Energy LinkOne versions 3.20 through 3.26 Description: The issue is caused by a web server misconfiguration that enables debug mode. When an attacker generates errors during a query operation, the full path of the filesystem directory...

Hitachi Energy LinkOne authorization issue vulnerability

Hitachi Energy LinkOne is an enterprise graphical parts catalog and content delivery solution from Hitachi Energy, Switzerland. It is used to publish, view and find spare parts for complex equipment and assemblies. A security vulnerability exists in Hitachi Energy LinkOne, which stems from a web...

CVE-2021-40338: Generation of Error Message Containing Sensitive Information

Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24;...

Mageia: Security Advisory (MGASA-2018-0048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-12768

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow issue was discovered in Cesanta MJS via the to json or debug function at mjs/src/mjs json.c. This issue can be exploited, potentially leading to unintended consequences...

Reolink RLC-410W "factory" binary firmware update vulnerability

Summary A firmware update vulnerability exists in the "factory" binary of reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions Reolink...

Cisco StarOS security vulnerabilities

Cisco StarOS is a virtualized operating system from Cisco. A security vulnerability exists in Cisco StarOS that stems from certain services not having debug mode properly enabled. A remote attacker could use this vulnerability to connect to a device, navigate to a debug mode enabled service, and...

Debian DLA-2892-1 : golang-1.7 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2892 advisory. Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service DoS and information leak. CVE-2021-33196 In...