29 matches found
CVE-2026-11404
creationtimestamp| type| source ---|---|--- 2026-07-09 16:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zyixrry2e 2026-07-11 00:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdftvzixw2e...
CVE-2026-11404
Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mgtlsserverrecvhello, which uses an attacker-controlled sessionidlen byte from a TLS ClientHello as a buffer index without validating it against the length of received data. A remote, unauthenticated...
django-cms-qe (1.4.3) potentially affected by CVE-2024-11404 via django-filer (1.3.2)
django-filer PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - django-cms-qe 1.4.3 Source cves: CVE-2024-11404 Source advisory: OSV:PYSEC-2026-1298...
django-cms-qe (2.0.0), django-filer-image (>=0.0.1, <=0.0.2) +11 more potentially affected by CVE-2024-11404 via django-filer (1.7.1)
django-filer PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - django-cms-qe 2.0.0 - django-filer-image =0.0.1, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =1.6.0, =0.8.0.0, =0.6.0, =0.7.0.1, =0.10.1.0 -...
aldryn-events (>=1.1.1, <=2.0.0), aldryn-forms (>=3.0.4, <=3.0.5) +10 more potentially affected by CVE-2024-11404 via django-filer (2.0.2)
django-filer PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - aldryn-events =1.1.1, =3.0.4, =1.1.1, =0.2.0, =0.1.1, =2.1.0, =0.6.2, =0.1.0, =0.3.1 - djangocms-lab-publications 0.1.4 - rapidbounce-cm...
danceschool-dancervax (>=0.1.1, <=0.1.5), django-danceschool (>=0.9.1, <=0.9.3) +5 more potentially affected by CVE-2024-11404 via django-filer (3.0.3)
django-filer PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - danceschool-dancervax =0.1.1, =0.9.1, =0.2.0.0, =1.16.0, =2.7.1 Source cves: CVE-2024-11404 Source advisory: OSV:PYSEC-2026-1298...
CVE-2019-11404
arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts for compiling and building the published JARs over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack...
CVE-2024-11404
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...
CVE-2017-11404
In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php...
CVE-2024-11404
creationtimestamp| type| source ---|---|--- 2024-11-20 13:44:40+00:00| seen| https://t.me/cvedetector/11600...
danceschool-dancervax (>=0.1.1, <=0.1.5), django-danceschool (>=0.9.1, <=0.9.3) +5 more potentially affected by CVE-2024-11404 via django-filer (3.0.3)
django-filer PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - danceschool-dancervax =0.1.1, =0.9.1, =0.2.0.0, =1.16.0, =2.7.1 Source cves: CVE-2024-11404 Source advisory:...
coreplus (0.1.0), django-coreplus (>=0.1.0, <=0.4.0) potentially affected by CVE-2024-11404 via django-filer (2.2.3)
django-filer PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - coreplus 0.1.0 - django-coreplus =0.1.0, =0.4.0 Source cves: CVE-2024-11404 Source advisory: OSV:GHSA-J4V3-WWWX-5GQV...
dcodex (1.0.3), django-filer-image (0.0.3a1) +3 more potentially affected by CVE-2024-11404 via django-filer (2.2.8)
django-filer PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - dcodex 1.0.3 - django-filer-image 0.0.3a1 - django-imagedeck 0.3.3 - giant-mixins =0.3.1, =0.3.5 - leprikon 3.0.0 Source cves:...
djangocms-blog (0.7.1) potentially affected by CVE-2024-11404 via django-filer (1.1.0)
django-filer PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - djangocms-blog 0.7.1 Source cves: CVE-2024-11404 Source advisory: OSV:GHSA-J4V3-WWWX-5GQV...
aldryn-events (>=1.1.1, <=2.0.0), aldryn-forms (>=3.0.4, <=3.0.5) +10 more potentially affected by CVE-2024-11404 via django-filer (2.0.2)
django-filer PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - aldryn-events =1.1.1, =3.0.4, =1.1.1, =0.2.0, =0.1.1, =2.1.0, =0.6.2, =0.1.0, =0.3.1 - djangocms-lab-publications 0.1.4 - rapidbounce-cm...
django-cms-qe (1.4.3) potentially affected by CVE-2024-11404 via django-filer (1.3.2)
django-filer PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on django-filer and may be impacted: - django-cms-qe 1.4.3 Source cves: CVE-2024-11404 Source advisory: OSV:GHSA-J4V3-WWWX-5GQV...
CVE-2024-11404 File Upload Bypass in django Filer
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...
CVE-2024-11404 File Upload Bypass in django Filer
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...
CVE-2024-11404
CVE-2024-11404 : Affected software is Django Filer (used with Django CMS). The vulnerability is an Unrestricted Upload of File with Dangerous Type and Stored XSS caused by input data manipulation and improper neutralization of script-related HTML tags. Impact is stored XSS with potential data han...