1261 matches found
UBUNTU-CVE-2024-41990
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...
PT-2024-5584
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.14 Django versions 5.0 through 5.0.7 Description The issue is related to SQL injection in the QuerySet.values and values list methods on models with a JSONField. This vulnerability can be exploited by passing a...
DataGear 安全漏洞
DataGear is an open source, free data visualization and analysis platform from DataGear, Inc. A security vulnerability exists in DataGear version 5.0.0 and earlier versions, which originates in the function evaluationVariableExpression in the file ConversionSqlParamValueMapper.java that causes...
SUSE CVE-2024-39614
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. getsupportedlanguagevariant was subject to a potential denial-of-service attack when used with very long strings containing specific characters...
Django Security Vulnerabilities
Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django version 5.0 up to and including 5.0.7, and version...
PT-2024-6068
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue is related to the get supported language variant function in Django, which can be subject to a potential denial-of-service attack when used with very lo...
Bluetron supOS Security Vulnerabilities
Bluetron supOS is an industrial operating system from the Chinese company Bluetron. A security vulnerability exists in Bluetron supOS version 5.0, which originates from allowing the api/image/download?fileName=... /directory traversal to read files...
PT-2024-28744
Name of the Vulnerable Software and Affected Versions supOS version 5.0 Description The issue allows directory traversal for reading files via the "api/image/download" endpoint, specifically when the fileName parameter contains ../. This enables unauthorized access to files on the system...
Exploit for Cross-site Scripting in Admiror-Design-Studio Admirorframes
CVE-2024-5737 AdmirorFrames Joomla! Extension HTML tag:...
PT-2024-6224
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. This is due to the...
PT-2024-24049 · Cybozu · Cybozu Garoon
Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 5.0.0 through 5.15.2 Description: The issue allows a remote authenticated attacker to delete the data of Shared To-Dos due to an incorrect authorization vulnerability. Recommendations: For Cybozu Garoon versions 5.0.0...
CVE-2024-35748
Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4...
WordPress CF7 Google Sheets Connector plugin <= 5.0.9 - Missing Authorization to Limited Site Configuration Update vulnerability
Missing Authorization to Limited Site Configuration Update vulnerability discovered by 1337Wannabe in WordPress Plugin CF7 Google Sheets Connector versions = 5.0.9...
Yokogawa Rental & Lease Unifier 安全漏洞
Yokogawa Rental & Lease Unifier is a solution focused on equipment rental and lease management from Yokogawa Rental & Lease Japan. A security vulnerability exists in Yokogawa Rental & Lease Unifier version 5.0 and later, which stems from a lack of authorization for coejobhook command execution...
IBM Aspera 跨站脚本漏洞
IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.6, which stems from the application's lack of effective filtering...
WordPress plugin iframe 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2024-26246 · Unknown · R-Pan-Scaffolding
Name of the Vulnerable Software and Affected Versions: r-pan-scaffolding versions 5.0 and below Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file. This is achieved through an arbitrary file upload vulnerability. Recommendations: For versions 5.0 an...
CVE-2023-37397
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672...
PT-2024-11636 · Ibm · Ibm Aspera Faspex
Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.7 Description: The issue allows a local user to obtain sensitive information due to weaker than expected security. Recommendations: For IBM Aspera Faspex versions 5.0.0 through 5.0.7, update to a...