7508 matches found
PYSEC-2024-47
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because ...
CVE-2024-27351
The CVE-2024-27351 issue affects Django’s Truncator.words() (with html=True) and the truncatewords_html filter. The vulnerability arises from a DoS vector in crafted HTML strings and is linked to an incomplete fix for CVE-2019-14232/CVE-2023-43665. Affected versions per sources include Django 3.2...
CVE-2024-27351
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because ...
CVE-2024-27351
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because ...
CVE-2024-27351
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because ...
CVE-2024-27351
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because ...
CVE-2024-27351
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. NOTE: this issue exists because ...
openSUSE 15 Security Update : python-Django (SUSE-SU-2024:0902-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:0902-1 advisory. - CVE-2024-27351: Fixed a regular expression DoS in django.utils.text.Truncator.words bsc1220358 Tenable has extracted the preceding description block direct...
SUSE-SU-2024:0902-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a regular expression DoS in django.utils.text.Truncator.words bsc1220358...
Remote Code Execution (RCE)
mssql-django is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to improper parameter sanitization, allowing attackers to execute arbitrary SQL statements, which can result in Remote Code Execution RCE...
SUSE-SU-2024:0875-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-24680: Fixed a denial-of-service in intcomma template filter bsc1219683. - CVE-2024-27351: Fixed potential regular expression denial-of-service in django.utils.text.Truncator.words bsc1220358...
GHSA-VMQV-47J8-GWV8 Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26164
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26164
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
...
CVE-2024-26164
The CVE-2024-26164 entry concerns the Microsoft Django Backend for SQL Server, described as a Remote Code Execution vulnerability. The connected sources confirm this affects the SQL Server backend used with Django and indicate an attacker could trigger arbitrary code execution via network access,...
