Lucene search
+L

7517 matches found

OSV
OSV
added 2024/03/12 6:31 p.m.42 views

GHSA-VMQV-47J8-GWV8 Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

8.8CVSS9AI score0.02106EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/03/12 6:31 p.m.56 views

Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

8.8CVSS8.5AI score0.02106EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/03/12 5:15 p.m.7 views

CVE-2024-26164

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.02106EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/12 5:15 p.m.38 views

CVE-2024-26164

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

8.8CVSS9.1AI score0.02106EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/12 5:15 p.m.28 views

Remote code execution

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

6.5CVSS8.4AI score0.02106EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/12 4:57 p.m.21 views

CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

...

8.8CVSS6.8AI score0.02106EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/12 4:57 p.m.259 views

CVE-2024-26164

The CVE-2024-26164 entry concerns the Microsoft Django Backend for SQL Server, described as a Remote Code Execution vulnerability. The connected sources confirm this affects the SQL Server backend used with Django and indicate an attacker could trigger arbitrary code execution via network access,...

8.8CVSS9.3AI score0.02106EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/12 4:57 p.m.48 views

CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

...

8.8CVSS8.9AI score0.02106EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/03/12 7:00 a.m.44 views

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

...

8.8CVSS7.1AI score0.02106EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2024/03/12 12:00 a.m.38 views

KLA65143 ACE vulnerability in Microsoft SQL Server

A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-26164 Related products Microsoft-SQL-Server CVE list CVE-2024-26164 critical KB list Solution Install necessary updates...

8.8CVSS9.3AI score0.02106EPSS
SaveExploits0References3
NCSC
NCSC
added 2024/03/12 12:00 a.m.8 views

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed and vulnerability in SQL Server. The vulnerability is located in the Django backend and allows a malicious party to be able to use the client application of the victim to execute an SQL injection and thus execute arbitrary code execute arbitrary code with the victim's privileg...

8.8CVSS8.2AI score0.02106EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/03/12 12:00 a.m.10 views

Microsoft Django Backend for SQL Server Security Vulnerability

Microsoft Django Backend for SQL Server is a database backend for the Django web framework for connecting to and manipulating Microsoft SQL Server databases from Microsoft USA. A security vulnerability exists in Microsoft Django Backend for SQL Server. An attacker can exploit the vulnerability to...

8.8CVSS7.3AI score0.02106EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.7 views

PT-2024-2256

Name of the Vulnerable Software and Affected Versions Microsoft Django Backend for SQL Server affected versions not specified Description The issue is related to the failure to protect the SQL query structure when handling an unsanitized parameter, which can be exploited by a remote attacker to...

9CVSS7.6AI score0.02106EPSS
SaveExploits0References16
OSV
OSV
added 2024/03/11 6:41 p.m.8 views

OPENSUSE-SU-2024:0080-1 Security update for python-Django1

This update for python-Django1 fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...

5.3CVSS5.5AI score0.01854EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/11 9:41 a.m.6 views

OPENSUSE-SU-2024:0077-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...

5.3CVSS5.5AI score0.01854EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/03/11 7:57 a.m.15 views

Cross Site Scripting(XSS)

djangomarkdownx is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to insufficient sanitization of JavaScript elements in the upload functionality, allowing an attacker to store a specially crafted JavaScript payload...

6.1CVSS6.6AI score0.00386EPSS
SaveExploits0References2Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2024/03/11 12:00 a.m.10 views

Security update for python-Django (important)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2024:0077-1 Rating: important References: 1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

7.5CVSS7.7AI score0.01854EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/08 3:30 p.m.43 views

GHSA-FVX8-79HX-X82F Django MarkdownX Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...

5.4CVSS5.6AI score0.00386EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/03/08 3:30 p.m.30 views

Django MarkdownX Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...

6.1CVSS5.9AI score0.00386EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/03/08 2:15 p.m.26 views

CVE-2024-2319

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...

6.1CVSS5.2AI score0.00386EPSS
SaveExploits0References1
Rows per page
Query Builder