admin-tool-button (>=1.0.1a0 <=1.0.5a0), aimmo (>=2.0.0 <=2.5.11) +108 more potentially affected by CVE-2023-23969 via django (>=3.2.0 <=3.2.16)

django PYPI version =3.2.0, =1.0.1a0, =2.0.0, =0.0.1, =6.2.0, =0.2.0, =22.0.0.dev21, =22.0.0.dev13, =22.0.0.dev29, =0.1.26, =0.1.27 - botbuilder-applicationinsights =4.14.3 - botbuilder-integration-applicationinsights-aiohttp =4.14.3 and more Source cves: CVE-2023-23969 Source advisory:...

PT-2023-1350

Name of the Vulnerable Software and Affected Versions Django versions 3.2 through 3.2.16 Django versions 4.0 through 4.0.8 Django versions 4.1 through 4.1.5 Description The issue is related to the handling of the Accept-Language header in Django, which can lead to excessive memory usage and a...

SPIP 3.2.x < 3.2.16, 4.x < 4.0.8, 4.1.x < 4.1.5 RCE Vulnerability

SPIP is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.16-alt1

3.2.16-alt1 built Oct. 13, 2022 Alexey Shabalin in task 308240 Oct. 11, 2022 Alexey Shabalin - new version 3.2.16 - Fixes for the following security vulnerabilities: + CVE-2022-41323 Potential denial-of-service vulnerability in internationalized URLs...

CVE-2021-43675

Lychee-v3 3.2.16 is affected by a Cross Site Scripting XSS vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user...

PT-2021-23904 · Lychee-V3 · Lychee-V3

Name of the Vulnerable Software and Affected Versions: Lychee-v3 version 3.2.16 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the php/Access/Guest.php file. The exit function will terminate the script and print a message to the user, which contains the albumID...

WordPress Download Manager Plugin < 3.2.16 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2021-24773

The WordPress Download Manager WordPress plugin before 3.2.16 does not escape some of the Download settings when outputting them, allowing high privilege users to perform XSS attacks even when the unfilteredhtml capability is disallowed...

OTRS Help Desk Multiple Vulnerabilities

OTRS Help Desk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if description...

DSA-2888-1 ruby-actionpack-3.2 - security update

Bulletin has no description...

UBUNTU-CVE-2013-6415

Cross-site scripting XSS vulnerability in the numbertocurrency helper in actionpack/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the unit parameter...

Ruby on Rails Action View MIME Memory Exhaustion

This module exploits a Denial of Service DoS condition in Action View that requires a controller action. By sending a specially crafted content-type header to a Rails application, it is possible for it to store the invalid MIME type, and may eventually consume all memory if enough invalid MIMEs a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via 1 the showOption parameter to domain.asp, or the 2 Folder or 3 StartPath parameter to FileManager.asp...

CVE-2007-5251

Multiple cross-site scripting XSS vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via 1 the showOption parameter to domain.asp, or the 2 Folder or 3 StartPath parameter to FileManager.asp...

CVE-2007-5251

CVE-2007-5251: Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16. The XSS vectors affect the web interface via the showOption parameter to domain.asp and the Folder or StartPath parameters to FileManager.asp. Affected component: Helm 3.2.16 web UI. Exploitation details/impact are...

CVE-2007-5251

Multiple cross-site scripting XSS vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web script or HTML via 1 the showOption parameter to domain.asp, or the 2 Folder or 3 StartPath parameter to FileManager.asp...