Lucene search
+L

12421 matches found

OSV
OSV
added 2022/02/03 2:15 a.m.4 views

PYSEC-2022-20

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49527EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/03 12:00 a.m.87 views

Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerabilities (USN-5269-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5269-1 advisory. Keryn Knight discovered that Django incorrectly handled certain template tags. A remote attacker could possibly use this issue to perform a...

7.5CVSS6.8AI score0.49527EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2022/02/03 12:00 a.m.40 views

CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.6AI score0.49527EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2022/02/03 12:00 a.m.209 views

bind security update

32:9.8.2-0.68.rc1.0.3.8 - Backport fix for CVE-2018-5741 Orabug: 33496185 32:9.8.2-0.68.rc1.0.2.8 - Backport possible assertion failure on DNAME processing CVE-2021-25215 32:9.8.2-0.68.rc1.0.1.8 - Backport the fix for buffer overflow CVE-2020-8625 Orabug: 32588749 32:9.8.2-0.68.rc1.8 - Fix...

10CVSS7.3AI score0.95182EPSS
SaveExploits65
AlpineLinux
AlpineLinux
added 2022/02/03 12:00 a.m.90 views

CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.6AI score0.49527EPSS
SaveExploits0
OSV
OSV
added 2022/02/03 12:00 a.m.32 views

CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.4AI score
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2022/02/02 5:18 p.m.39 views

CVE-2022-23596

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS3AI score0.01632EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2022/02/02 12:15 a.m.31 views

CVE-2022-23833

A flaw was found in Django. The issue occurs when passing certain inputs to multipart forms, resulting in an infinite loop when parsing files...

7.5CVSS2.2AI score0.49527EPSS
SaveExploits0References4
Prion
Prion
added 2022/02/01 12:15 p.m.19 views

Design/Logic Flaw

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

5CVSS7.5AI score0.01632EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/02/01 11:52 a.m.125 views

CVE-2022-23596

CVE-2022-23596 affects the Junrar Java RAR archive library. A carefully crafted RAR archive can trigger an infinite loop during extraction, with impact depending on how the library is used by the application. The fix is available in version 7.4.1. Remediation: upgrade to 7.4.1 or later (no public...

7.5CVSS7.5AI score0.01632EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/02/01 11:52 a.m.29 views

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS7.7AI score0.01632EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/02/01 11:52 a.m.6 views

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS7.5AI score0.01632EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/01 11:52 a.m.35 views

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS7.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/02/01 8:00 a.m.29 views

CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49527EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/01 8:00 a.m.7 views

UBUNTU-CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49527EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/01 12:47 a.m.15 views

GHSA-M6CJ-93V6-CVR5 Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

Impact A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. Patches The problem is partially patched in 7.4.1 Workarounds None References...

7.5CVSS7.1AI score0.01632EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/02/01 12:47 a.m.42 views

Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

Impact A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. Patches The problem is partially patched in 7.4.1 Workarounds None References...

7.5CVSS1.8AI score0.01632EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2022/02/01 12:00 a.m.10 views

Junrar 安全漏洞

Junrar is a general Java Unrar library. It is used to read and extract .Rar files. Junrar suffers from a security vulnerability that originates from an infinite loop triggered by building a RAR archive...

7.5CVSS7.5AI score0.01632EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/02/01 12:00 a.m.15 views

Django 代码问题漏洞

Django is the Django Foundation's set of open source web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, etc. A code issue vulnerability exists in Django, which stems from an error in the product's MultiPartParse...

7.5CVSS5.7AI score0.49527EPSS
SaveExploits0References14
OSV
OSV
added 2022/01/28 4:15 p.m.3 views

DEBIAN-CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS7.5AI score0.02485EPSS
SaveExploits1References1
Rows per page
Query Builder