Lucene search
+L

4 matches found

SUSE CVE
SUSE CVE
added 2026/02/05 12:27 a.m.11 views

SUSE CVE-2026-1207

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on RasterField only implemented on PostGIS allows remote attackers to inject SQL via the band index parameter. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluate...

8.1CVSS5.6AI score0.09436EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/03 2:35 p.m.173 views

CVE-2026-1207

CVE-2026-1207 affects Django: vulnerable in Django 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The issue is in raster lookups on RasterField (PostGIS only) that allows remote SQL injection via the band index parameter. Older unsupported Django series (5.0.x, 4.1.x, 3.2.x) were not...

8.3CVSS5.7AI score0.09436EPSS
SaveIn wildExploits1References15Affected Software1
OSV
OSV
added 2026/02/03 2:35 p.m.7 views

CVE-2026-1207 Potential SQL injection via raster lookups on PostGIS

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on RasterField only implemented on PostGIS allows remote attackers to inject SQL via the band index parameter. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluate...

5.4CVSS6.9AI score0.09436EPSS
SaveExploits1References19
Tenable Nessus
Tenable Nessus
added 2026/02/03 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-1207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on RasterField only implemented on PostGIS allows remote...

5.4CVSS6.1AI score0.09436EPSS
SaveExploits1References2
Rows per page
Query Builder