7517 matches found
GHSA-VMQV-47J8-GWV8 Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26164
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26164
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
...
CVE-2024-26164
The CVE-2024-26164 entry concerns the Microsoft Django Backend for SQL Server, described as a Remote Code Execution vulnerability. The connected sources confirm this affects the SQL Server backend used with Django and indicate an attacker could trigger arbitrary code execution via network access,...
CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
...
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
...
KLA65143 ACE vulnerability in Microsoft SQL Server
A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-26164 Related products Microsoft-SQL-Server CVE list CVE-2024-26164 critical KB list Solution Install necessary updates...
Vulnerability fixed in Microsoft SQL Server
Microsoft has fixed and vulnerability in SQL Server. The vulnerability is located in the Django backend and allows a malicious party to be able to use the client application of the victim to execute an SQL injection and thus execute arbitrary code execute arbitrary code with the victim's privileg...
Microsoft Django Backend for SQL Server Security Vulnerability
Microsoft Django Backend for SQL Server is a database backend for the Django web framework for connecting to and manipulating Microsoft SQL Server databases from Microsoft USA. A security vulnerability exists in Microsoft Django Backend for SQL Server. An attacker can exploit the vulnerability to...
PT-2024-2256
Name of the Vulnerable Software and Affected Versions Microsoft Django Backend for SQL Server affected versions not specified Description The issue is related to the failure to protect the SQL query structure when handling an unsanitized parameter, which can be exploited by a remote attacker to...
OPENSUSE-SU-2024:0080-1 Security update for python-Django1
This update for python-Django1 fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...
OPENSUSE-SU-2024:0077-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...
Cross Site Scripting(XSS)
djangomarkdownx is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to insufficient sanitization of JavaScript elements in the upload functionality, allowing an attacker to store a specially crafted JavaScript payload...
Security update for python-Django (important)
openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2024:0077-1 Rating: important References: 1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...
GHSA-FVX8-79HX-X82F Django MarkdownX Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...
CVE-2024-2319
Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...