Lucene search
+L

7635 matches found

OpenVAS
OpenVAS
added 2023/07/05 12:00 a.m.29 views

Django 3.2.x < 3.2.20, 4.1.x < 4.1.10, 4.2.x < 4.2.3 ReDoS Vulnerability - Linux

Django is prone to a regular expression denial of service ReDoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.5AI score0.02978EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/07/04 12:00 a.m.55 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.1AI score0.02978EPSS
SaveExploits0References9
OSV
OSV
added 2023/07/04 12:00 a.m.10 views

UBUNTU-CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.1AI score0.02978EPSS
SaveExploits0References10
OSV
OSV
added 2023/07/03 3:30 p.m.18 views

GHSA-JH3W-4VVF-MJGR Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

8.7CVSS7.1AI score0.02978EPSS
SaveExploits0References19
Github Security Blog
Github Security Blog
added 2023/07/03 3:30 p.m.123 views

Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS6.7AI score0.02978EPSS
SaveExploits0References19Affected Software1
NVD
NVD
added 2023/07/03 1:15 p.m.24 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.3AI score0.02978EPSS
SaveExploits0References9
OSV
OSV
added 2023/07/03 1:15 p.m.7 views

DEBIAN-CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.5AI score0.02978EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/03 1:15 p.m.9 views

PYSEC-2023-100

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS5.9AI score0.02978EPSS
SaveExploits0References5
PyPA
PyPA
added 2023/07/03 1:15 p.m.9 views

PYSEC-2023-100

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS6.8AI score0.02978EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2023/07/03 1:15 p.m.28 views

Code injection

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

5CVSS7.2AI score0.02978EPSS
SaveExploits0References7Affected Software3
Vulnrichment
Vulnrichment
added 2023/07/03 12:00 a.m.32 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

6.6AI score0.02978EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/07/03 12:00 a.m.29 views

FreeBSD : Django -- multiple vulnerabilities (4ee7fa77-19a6-11ee-8a05-080027eda32c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4ee7fa77-19a6-11ee-8a05-080027eda32c advisory. - In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator a...

7.5CVSS7.5AI score0.02978EPSS
SaveExploits0References3
CVE
CVE
added 2023/07/03 12:00 a.m.338 views

CVE-2023-36053

CVE-2023-36053 affects Django’s EmailValidator and URLValidator due to a ReDoS flaw in the regular expression used for domain name labels. Affects Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3. The impact is a potential denial of service with availability compromise, as attacker...

7.5CVSS7.1AI score0.02978EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2023/07/03 12:00 a.m.68 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.6AI score0.02978EPSS
SaveExploits0References8
OSV
OSV
added 2023/07/03 12:00 a.m.29 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7AI score
SaveExploits0References11
CNNVD
CNNVD
added 2023/07/03 12:00 a.m.33 views

Django 安全漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django versions prior to 3.2.20, 4.1.10, and 4.2.3, which...

7.5CVSS7.3AI score0.02978EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2023/07/03 12:00 a.m.103 views

CVE-2023-36053

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression denial of service attack via a very large number of domain name labels of emails and URLs...

7.5CVSS7.6AI score0.02978EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2023/07/01 12:00 a.m.27 views

Django -- multiple vulnerabilities

Django reports: CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator...

7.5CVSS6.9AI score0.02978EPSS
SaveExploits0References1
Redos
Redos
added 2023/06/22 12:00 a.m.38 views

ROS-20230621-01

A vulnerability in the Django web application framework is related to the fact that the application does not perform file validation when using a single form field to upload multiple files. files when using a single form field to upload multiple files. Exploiting the vulnerability could allow an...

9.8CVSS9.1AI score0.01391EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/20 8:52 a.m.74 views

Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-31047 DESCRIPTION: Django could allow a remote attacker to bypass security restrictions. By sending a specially-crafted request, an attacker...

9.8CVSS9.1AI score0.81039EPSS
SaveExploits12Affected Software1
Rows per page
Query Builder