30 matches found
BIT-DJANGO-2026-15337 Potential denial-of-service vulnerability in check_for_language()
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
PT-2026-67751
Name of the Vulnerable Software and Affected Versions Django versions prior to 5.2.17 Django versions prior to 6.0.8 Description A denial-of-service issue exists in the check for language function within django.utils.translation. The problem occurs when the function receives numerous distinct and...
CVE-2026-15337: Memory Allocation with Excessive Size Value
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
Linux Distros Unpatched Vulnerability : CVE-2026-15337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service...
CVE-2026-2084
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to...
CVE-2026-2084
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to...
CVE-2026-2084 D-Link DIR-823X set_language os command injection
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to...
CVE-2026-2084: Improper Neutralization of Special Elements used in an OS Command
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to...
EUVD-2020-23124
Malware in sbrugna...
CVE-2020-35419
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
CVE-2025-27556: Allocation of Resources Without Limits or Throttling
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
Group Office CRM Cross-Site Scripting Vulnerability
Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A cross-site scripting vulnerability exists in Group Office CRM version 6.4.196. An attacker can exploit this vulnerability via the...
CVE-2020-35419
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
Cross site scripting
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
CVE-2020-35419
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
CVE-2020-35419
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
CVE-2020-35419: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
