Lucene search
+L

7 matches found

CNVD
CNVD
•added 2021/08/18 12:00 a.m.•33 views

Django has an unspecified vulnerability (CNVD-2021-68758)

Django is the Django Foundation's set of Python-based language open source Web application framework . Django-Widgy version 0.8.4 contains a security vulnerability that can be exploited by remote attackers to execute arbitrary code via the "image" widget in the component "Change Widgy Page"...

9.8CVSS6.8AI score0.0289EPSS
SaveExploits1References1
PyPA
PyPA
•added 2021/08/16 6:15 p.m.•18 views

PYSEC-2021-336

Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'...

9.8CVSS8AI score0.0289EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/08/16 5:56 p.m.•3 views

CVE-2020-18704

Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'...

9.8CVSS0.0289EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2021/08/16 5:56 p.m.•30 views

CVE-2020-18704

Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'...

9.8AI score0.0289EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•6 views

CVE-2020-18704: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'...

9.8CVSS6.5AI score0.0289EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•12 views

Django 代码问题漏洞

Django is the Django Foundation's set of Python-based language open source Web application framework . Django-Widgy version 0.8.4 contains a security vulnerability that can be exploited by remote attackers to execute arbitrary code via the "image" widget in the component "Change Widgy Page"...

9.8CVSS6.1AI score0.0289EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/08/16 12:00 a.m.•4 views

PT-2021-10218

Name of the Vulnerable Software and Affected Versions: Django-Widgy version 0.8.4 Description: The issue allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'. This is due to an unrestricted upload of files with dangerous types...

9.8CVSS0.0289EPSS
SaveExploits1References9
Rows per page
Query Builder