2854 matches found
FreeBSD : py-markdown2 -- regular expression denial of service vulnerability (c9b3324f-8e03-4ae3-89ce-8098cdc5bfa9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c9b3324f-8e03-4ae3-89ce-8098cdc5bfa9 advisory. - markdown2 =1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service...
FreeBSD : py-Flask-Cors -- directory traversal vulnerability (252f40cb-618c-47f4-a2cf-1abf30cffbbe)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 252f40cb-618c-47f4-a2cf-1abf30cffbbe advisory. - An issue was discovered in Flask-CORS aka CORS Middleware for Flask before 3.0.9. It allows ../...
FreeBSD : py-django-photologue -- XSS vulnerability (c2c89dea-2859-4231-8f3b-012be0d475ff)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c2c89dea-2859-4231-8f3b-012be0d475ff advisory. - A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected b...
FreeBSD : py-wagtail -- stored XSS vulnerability (17efbe19-4e72-426a-8016-2b4e001c1378)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17efbe19-4e72-426a-8016-2b4e001c1378 advisory. - Wagtail is an open source content management system built on Django. Starting in version 1.5 and prio...
FreeBSD : py-flask-caching -- remote code execution or local privilege escalation vulnerabilities (692a5fd5-bb25-4df4-8a0e-eb91581f2531)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 692a5fd5-bb25-4df4-8a0e-eb91581f2531 advisory. - DISPUTED The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, whi...
FreeBSD : py-Scrapy -- DoS vulnerability (4eb5dccb-923c-4f18-9cd4-b53f9e28d4d7)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4eb5dccb-923c-4f18-9cd4-b53f9e28d4d7 advisory. - Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files...
FreeBSD : py-Scrapy -- cookie injection vulnerability (a5403af6-225e-48ba-b233-bd95ad26434a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a5403af6-225e-48ba-b233-bd95ad26434a advisory. - Responses from domain names whose public domain name suffix contains 1 or more periods e.g. responses...
FreeBSD : py-dparse -- REDoS vulnerability (83b29e3f-886f-439f-b9a8-72e014479ff9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 83b29e3f-886f-439f-b9a8-72e014479ff9 advisory. - dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular...
FreeBSD : py-wagtail -- DoS vulnerability (2def7c4b-736f-4754-9f03-236fcb586d91)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2def7c4b-736f-4754-9f03-236fcb586d91 advisory. - Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2....
FreeBSD : py-WsgiDAV -- XSS vulnerability (1a15b928-5011-4953-8133-d49e24902fe1)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1a15b928-5011-4953-8133-d49e24902fe1 advisory. - WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library...
FreeBSD : py-Scrapy -- exposure of sensitive information vulnerability (67fe5e5b-549f-4a2a-9834-53f60eaa415e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 67fe5e5b-549f-4a2a-9834-53f60eaa415e advisory. - Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior t...
FreeBSD : py-flask-security -- user redirect to arbitrary URL vulnerability (06492bd5-085a-4cc0-9743-e30164bdcb1c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 06492bd5-085a-4cc0-9743-e30164bdcb1c advisory. - This affects all versions of package Flask-Security. When using the getpostlogoutredirect and...
FreeBSD : py-httpx -- input validation vulnerability (e831dd5a-7d8e-4818-aa1f-17dd495584ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e831dd5a-7d8e-4818-aa1f-17dd495584ec advisory. - Encode OSS httpx 0.23.0 is affected by improper input validation in httpx.URL, httpx.Client and some...
FreeBSD : py-pygments -- multiple DoS vulnerabilities (cdc685b5-1724-49a1-ad57-2eaab68e9cc0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cdc685b5-1724-49a1-ad57-2eaab68e9cc0 advisory. - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service...
FreeBSD : py-markdown2 -- XSS vulnerability (cf6f3465-e996-4672-9458-ce803f29fdb7)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cf6f3465-e996-4672-9458-ce803f29fdb7 advisory. - python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match...
Arbitrary Code Execution
pandasai is vulnerable to Arbitrary Code Execution. The vulnerability exists in cleancode function at init.py due to lack of security checks which allows an attacker to inject and execute malicious code, resulting in prompt injection...
PT-2023-26698
Name of the Vulnerable Software and Affected Versions django-sspanel version 2022.2.2 Description The software contains a remote command execution RCE issue through the GoodsCreateView. post component within sspanel/admin view.py. The software is used in proxy services, potentially leading to...
SUSE CVE-2023-25399
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly...
