Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
•added 2024/04/28 12:00 a.m.•34 views

RHEL 8 : RHUI 4.3.0 - Security Fixes, Bug Fixes, and Enhancements Update (Low) (RHSA-2023:0742)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0742 advisory. Red Hat Update Infrastructure RHUI offers a highly scalable, highly redundant framework that enables you to manage repositories and content...

7.5CVSS6.5AI score0.03007EPSS
SaveExploits0References17
RedHat Linux
RedHat Linux
•added 2023/02/13 12:03 p.m.•97 views

Low: Red Hat Security Advisory: RHUI 4.3.0 release - Security Fixes, Bug Fixes, and Enhancements Update

An updated version of Red Hat Update Infrastructure RHUI is now available. RHUI 4.3 fixes a security bug, introduces multiple new features, and upgrades underlying Pulp to a Long Term Support LTS version. Red Hat Update Infrastructure RHUI offers a highly scalable, highly redundant framework that...

7.5CVSS6.4AI score0.03007EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
•added 2022/07/05 2:41 p.m.•603 views

Moderate: Red Hat Security Advisory: Satellite 6.11 Release

An update is now available for Red Hat Satellite 6.11 Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Security Fixes: libsolv: Heap-based buff...

9.8CVSS7.1AI score0.49527EPSS
SaveExploits14References476
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•24 views

Mageia: Security Advisory (MGASA-2021-0552)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.02488EPSS
SaveExploits0References5
ALT Linux
ALT Linux
•added 2021/12/24 12:00 a.m.•90 views

Security fix for the ALT Linux 9 package python3-module-django version 2.2.25-alt1

2.2.25-alt1 built Dec. 24, 2021 Alexey Shabalin in task 292358 Dec. 17, 2021 Alexey Shabalin - new version 2.2.25 - Fixes for the following security vulnerabilities: + CVE-2021-44420: Potential bypass of an upstream access control based on URL paths...

7.5CVSS7.5AI score0.02488EPSS
SaveExploits0
ALT Linux
ALT Linux
•added 2021/12/24 12:00 a.m.•141 views

Security fix for the ALT Linux 10 package python3-module-django version 3.2.10-alt1

3.2.10-alt1 built Dec. 24, 2021 Anton Farygin in task 292330 Dec. 17, 2021 Alexey Shabalin - new version 3.2.10 - Fixes for the following security vulnerabilities: + CVE-2021-44420 Fixed potential bypass of an upstream access control based on URL paths...

7.5CVSS7.5AI score0.02488EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/12/14 12:00 a.m.•25 views

Django 2.2 < 2.2.25, 3.1 < 3.1.14, 3.2 < 3.2.10 Access Control Bypass Vulnerability - Windows

Django is prone to an access control bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

7.5CVSS7.3AI score0.02488EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/10 10:19 p.m.•21 views

MGASA-2021-0552 Updated python-django packages fix security vulnerability

Potential bypass of an upstream access control based on URL paths. CVE-2021-44420 HTTP requests for URLs with trailing newlines could bypass an upstream access control based on URL paths...

7.5CVSS7.4AI score0.02488EPSS
SaveExploits0References4
NVD
NVD
•added 2021/12/08 12:15 a.m.•18 views

CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths...

7.5CVSS0.02488EPSS
SaveExploits0References6
CVE
CVE
•added 2021/12/07 10:55 p.m.•233 views

CVE-2021-44420

CVE-2021-44420 affects Django versions: 2.2 prior to 2.2.25, 3.1 prior to 3.1.14, and 3.2 prior to 3.2.10. The issue allows HTTP requests for URLs with trailing newlines to bypass upstream access control based on URL paths. The practical impact is potential unintended access control bypass in aff...

7.5CVSS7.1AI score0.02488EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2021/12/07 10:55 p.m.•124 views

CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths...

7.5CVSS7.3AI score0.02488EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2021/12/07 8:00 a.m.•34 views

CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths...

7.5CVSS7.1AI score0.02488EPSS
SaveExploits0References3
Rows per page
Query Builder