Lucene search
+L

6500 matches found

Debian
Debian
•added 2024/08/26 3:55 p.m.•75 views

[SECURITY] [DLA 3856-1] python-html-sanitizer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3856-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 26, 2024 https://wiki.debian.org/LTS -...

6.1CVSS6.5AI score0.00555EPSS
SaveExploits0
osv_go
osv_go
•added 2024/08/21 2:30 p.m.•59 views

GO-2023-2426 ewen-lbh/ffcss Late-Unicode normalization vulnerability in github.com/ewen-lbh/ffcss

ewen-lbh/ffcss Late-Unicode normalization vulnerability in github.com/ewen-lbh/ffcss...

5.3CVSS5.2AI score0.00522EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2024/08/15 5:34 a.m.•16 views

kernel: vt: fix unicode buffer corruption when deleting characters

A vulnerability as found in the Linux kernel’s virtual terminal VT subsystem, which could lead to unicode buffer corruption when deleting characters. This issue arises from improper handling of unicode data, which can corrupt memory or lead to unintended behavior...

5.3CVSS7.4AI score0.00915EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/08/13 12:00 a.m.•183 views

KB5041828: Windows Server 2012 R2 Security Update (August 2024)

The remote Windows host is missing security update 5041828. It is, therefore, affected by multiple vulnerabilities - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than neede...

9.8CVSS8AI score0.70564EPSS
SaveExploits31References41
Veracode
Veracode
•added 2024/08/08 8:16 a.m.•31 views

Denial Of Service (DoS)

Django is vulnerable to a Denial Of Service DoS. The vulnerability is due to the lack of validation for certain inputs with a very large number of Unicode characters in the urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget. Attackers can create malicious payloads with...

7.5CVSS6.5AI score0.00954EPSS
SaveExploits0References9Affected Software2
osv_bit
osv_bit
•added 2024/08/08 7:17 a.m.•25 views

BIT-DJANGO-2024-41991

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7.3AI score0.00954EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/08/08 4:53 a.m.•14 views

kernel: vt: fix unicode buffer corruption when deleting characters

A vulnerability as found in the Linux kernel’s virtual terminal VT subsystem, which could lead to unicode buffer corruption when deleting characters. This issue arises from improper handling of unicode data, which can corrupt memory or lead to unintended behavior...

5.3CVSS7.4AI score0.00915EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2024/08/08 2:21 a.m.•12 views

SUSE CVE-2024-41991

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS9.2AI score0.00954EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2024/08/07 4:09 p.m.•31 views

CVE-2024-41991

A flaw was found in Django. 'urlize', 'urlizetrunc', and 'AdminURLFieldWidget' may be subject to a denial of service attack via certain inputs with a very large number of Unicode characters. Mitigation Mitigation for this issue is either not available or the currently available options do not mee...

7.5CVSS7.5AI score0.00954EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2024/08/07 3:30 p.m.•14 views

GHSA-R836-HH6V-RG5G Django vulnerable to denial-of-service attack

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

6.9CVSS6.7AI score0.00954EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2024/08/07 3:30 p.m.•36 views

Django vulnerable to denial-of-service attack

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.5AI score0.00954EPSS
SaveExploits0References9Affected Software1
NVD
NVD
•added 2024/08/07 3:15 p.m.•25 views

CVE-2024-41991

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS0.00954EPSS
SaveExploits0References4
osv_pysec
osv_pysec
•added 2024/08/07 3:15 p.m.•15 views

PYSEC-2024-69

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.7AI score0.00954EPSS
SaveExploits0References4
PyPA
PyPA
•added 2024/08/07 3:15 p.m.•26 views

PYSEC-2024-69

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7AI score0.00954EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
•added 2024/08/07 9:43 a.m.•12 views

kernel: vt: fix unicode buffer corruption when deleting characters

A vulnerability as found in the Linux kernel’s virtual terminal VT subsystem, which could lead to unicode buffer corruption when deleting characters. This issue arises from improper handling of unicode data, which can corrupt memory or lead to unintended behavior...

5.3CVSS7.4AI score0.00915EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/08/07 12:14 a.m.•15 views

kernel: vt: fix unicode buffer corruption when deleting characters

A vulnerability as found in the Linux kernel’s virtual terminal VT subsystem, which could lead to unicode buffer corruption when deleting characters. This issue arises from improper handling of unicode data, which can corrupt memory or lead to unintended behavior...

5.3CVSS7.4AI score0.00915EPSS
SaveExploits0References5
Mend
Mend
•added 2024/08/07 12:00 a.m.•8 views

CVE-2024-41991

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

8.7CVSS0.00954EPSS
SaveExploits0References15
osv_cve
osv_cve
•added 2024/08/07 12:00 a.m.•23 views

CVE-2024-41991

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.5AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•8 views

CVE-2024-41991: Improper Validation of Specified Quantity in Input

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.7AI score0.00954EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/07 12:00 a.m.•22 views

CVE-2024-41991

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters...

6.7AI score0.00954EPSS
SaveExploits0References3
Rows per page
Query Builder