SUSE: Security Advisory (SUSE-SU-2018:1251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

django-zero (0.0.1), farmdrop (0.2.0) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C2GJ...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory:...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:GHSA-PGHF-347X-C2GJ...

django-zero (0.0.1), farmdrop (0.2.0) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: OSV:GHSA-PGHF-347X-C2GJ...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C2GJ...

GHSA-PGHF-347X-C2GJ SQL Injection via in django-debug-toolbar

Impact With Django Debug Toolbar attackers are able to execute SQL by changing the rawsql input of the SQL explain, analyze or select forms and submitting the form. NOTE: This is a high severity issue for anyone using the toolbar in a production environment. Generally the Django Debug Toolbar tea...

openSUSE: Security Advisory for sudo (openSUSE-SU-2021:0169-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GO-2021-0064 Unauthorized credential disclosure via debug logs in k8s.io/kubernetes and k8s.io/client-go

Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level. This is due to an incomplete fix for CVE-2019-11250...

GO-2021-0065 Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go

Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

Sql injection

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

django-zero (0.0.1), farmdrop (0.2.0) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-1...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...