Lucene search
+L

25 matches found

SUSE CVE
SUSE CVE
•added 2026/09/25 11:46 p.m.•29 views

SUSE CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/25 5:17 a.m.•34 views

DEBIAN-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 5:17 a.m.•27 views

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS0.00226EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/09/25 5:17 a.m.•33 views

UBUNTU-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References7
Snyk
Snyk
•added 2026/09/25 4:46 a.m.•16 views

Brute Force

Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Brute Force in the failed login attempt rate-limiting logic, an...

6.3CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/25 4:25 a.m.•73 views

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS0.00226EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/25 4:25 a.m.•52 views

CVE-2026-97764

The django-allauth library, in versions before 65.19.4 , contains a vulnerability where failed login attempt limits are not properly enforced. In certain common configurations, an attacker can exploit the way the system handles diacritics (such as accents) to bypass these limits, allowing for a h...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References5
Mend
Mend
•added 2026/09/25 4:25 a.m.•12 views

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

6.3CVSS5.8AI score0.00226EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/25 4:25 a.m.•17 views

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 4:25 a.m.•21 views

EUVD-2026-86517

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/25 12:00 a.m.•22 views

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•19 views

PT-2026-98353

Name of the Vulnerable Software and Affected Versions django-allauth versions prior to 65.19.4 Description In certain common configurations, the software fails to enforce expected limits on failed login attempts. An attacker can bypass these restrictions by leveraging the handling of diacritics,...

3.7CVSS5.7AI score0.00226EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•46 views

CVE-2026-97764: Incorrect Behavior Order: Validate Before Canonicalize

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

3.7CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-97764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...

3.7CVSS5.7AI score0.00226EPSS
SaveExploits0References3
Fedora
Fedora
•added 2025/10/10 1:04 a.m.•30 views

[SECURITY] Fedora 41 Update: ibus-bamboo-0.8.4~RC6-2.fc41

A Vietnamese IME for IBus using Bamboo Engine. The open source Vietnamese keyboard supports most common encodings, popular Vietnamese typing methods, smart diacritics, spell checking, shortcuts,...

6.5CVSS6.6AI score0.0055EPSS
SaveExploits1
Fedora
Fedora
•added 2025/10/10 12:51 a.m.•28 views

[SECURITY] Fedora 42 Update: ibus-bamboo-0.8.4~RC6-2.fc42

A Vietnamese IME for IBus using Bamboo Engine. The open source Vietnamese keyboard supports most common encodings, popular Vietnamese typing methods, smart diacritics, spell checking, shortcuts,...

6.5CVSS6.6AI score0.0055EPSS
SaveExploits1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/12 3:06 a.m.•13 views

Malicious code in angular-remove-diacritics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abbdf7a3253b0f21066be1be90dc829f3e83d3cd402e748a428c5a1b36f4918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/03/12 3:06 a.m.•3 views

Malware in angular-remove-diacritics

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/03/12 3:06 a.m.•12 views

MAL-2025-2295 Malicious code in angular-remove-diacritics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abbdf7a3253b0f21066be1be90dc829f3e83d3cd402e748a428c5a1b36f4918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
•added 2022/09/14 12:03 p.m.•10 views

Malicious Package

Overview angular-remove-diacritics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder