Lucene search
+L

7531 matches found

Veracode
Veracode
added 2023/09/05 5:18 a.m.29 views

Denial Of Service (DoS)

py3-django is vulnerable to Denial of Service DoS attacks. This vulnerability can be exploited by an attacker to cause the Django server to crash by sending a specially crafted URI...

7.5CVSS6.7AI score0.01284EPSS
SaveExploits0References10Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/09/05 12:00 a.m.46 views

FreeBSD : Django -- multiple vulnerabilities (8fd4f40a-4b7d-11ee-aa2a-080027de9982)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8fd4f40a-4b7d-11ee-aa2a-080027de9982 advisory. - Django reports: CVE-2023-41164: Potential denial of service vulnerability in...

7.5CVSS6.6AI score0.01284EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/04 11:00 a.m.14 views

UBUNTU-CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.8AI score0.01284EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2023/09/04 11:00 a.m.36 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.8AI score0.01284EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/09/04 12:00 a.m.19 views

Django Security Vulnerabilities

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django that stems from a denial of service vulnerability in...

7.5CVSS6.7AI score0.01284EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/09/04 12:00 a.m.19 views

PT-2023-7994

Name of the Vulnerable Software and Affected Versions Django versions 3.2 through 3.2.20 Django versions 4.1 through 4.1.10 Django versions 4.2 through 4.2.4 Description The issue is related to the django.utils.encoding.uri to iri component of the Django web application platform, which is...

7.8CVSS6.7AI score0.01284EPSS
SaveExploits0References152
FreeBSD
FreeBSD
added 2023/09/01 12:00 a.m.32 views

Django -- multiple vulnerabilities

Django reports: CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uritoiri...

7.5CVSS6.6AI score0.01284EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:00 a.m.18 views

FreeBSD : py-wagtail -- DoS vulnerability (2def7c4b-736f-4754-9f03-236fcb586d91)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2def7c4b-736f-4754-9f03-236fcb586d91 advisory. - Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2....

4.9CVSS5.3AI score0.0107EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:00 a.m.25 views

FreeBSD : py-django-photologue -- XSS vulnerability (c2c89dea-2859-4231-8f3b-012be0d475ff)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c2c89dea-2859-4231-8f3b-012be0d475ff advisory. - A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected b...

6.1CVSS4.3AI score0.00514EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:00 a.m.24 views

FreeBSD : py-wagtail -- stored XSS vulnerability (17efbe19-4e72-426a-8016-2b4e001c1378)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17efbe19-4e72-426a-8016-2b4e001c1378 advisory. - Wagtail is an open source content management system built on Django. Starting in version 1.5 and prio...

6.4CVSS5.7AI score0.00778EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/08/21 9:53 p.m.14 views

python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator

A regular expression denial of service vulnerability has been found in Django. Email and URL validators are vulnerable to this flaw when processing a very large number of domain name labels of emails and URLs...

7.5CVSS7AI score0.02978EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/08/21 5:07 p.m.11 views

python-django: Potential denial-of-service vulnerability in file uploads

A memory exhaustion flaw was found in the python-django package. This issue occurs when passing certain inputs, leading to a system crash and denial of service...

7.5CVSS6.7AI score0.62575EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/08/21 5:07 p.m.76 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.7AI score0.62575EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/08/21 5:07 p.m.47 views

python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator

A regular expression denial of service vulnerability has been found in Django. Email and URL validators are vulnerable to this flaw when processing a very large number of domain name labels of emails and URLs...

7.5CVSS7AI score0.02978EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/08/09 2:20 p.m.11 views

python-django: Potential bypass of validation when uploading multiple files using one form field

A bypass of validation flaw was found in python-django. When uploading multiple files using one form field, an attacker could upload multiple files without validation due to the server only validating the last file uploaded...

9.8CVSS7.1AI score0.01391EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/08/09 2:20 p.m.56 views

Moderate: Red Hat Security Advisory: RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements

An updated version of Red Hat Update Infrastructure RHUI is now available. RHUI 4.5 fixes several security and operational bugs and also adds several new features. Red Hat Update Infrastructure RHUI offers a highly scalable, highly redundant framework that enables you to manage repositories and...

9.8CVSS6.6AI score0.01391EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2023/08/08 12:00 a.m.11 views

The vulnerability of the EmailValidator and URLValidator components of the Django web application software platform allows a hacker to trigger a service failure.

The vulnerability of the EmailValidator and URLValidator components of the Django web application framework is related to the use of a regular expression with high computational complexity when processing email subject lines and URL addresses. Exploiting this vulnerability could allow an attacker...

7.8CVSS7AI score0.02978EPSS
SaveExploits0References13Affected Software5
RedhatCVE
RedhatCVE
added 2023/08/07 7:19 p.m.45 views

CVE-2023-36053

A regular expression denial of service vulnerability has been found in Django. Email and URL validators are vulnerable to this flaw when processing a very large number of domain name labels of emails and URLs...

7.5CVSS6.7AI score0.02978EPSS
SaveExploits0References4
NVD
NVD
added 2023/08/04 12:15 a.m.28 views

CVE-2023-38941

django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...

9.8CVSS9.7AI score0.01626EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/08/04 12:15 a.m.5 views

CVE-2023-38941

django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...

9.8CVSS7.5AI score0.01626EPSS
SaveExploits0References2
Rows per page
Query Builder