7626 matches found
Django -- multiple vulnerabilities
Django reports: CVE-2024-38875: Potential denial-of-service in django.utils.html.urlize. CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords. CVE-2024-39330: Potential directory-traversal in django.core.files.storage.Storage.save. CVE-2024-39614:...
SUSE CVE-2024-21520
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...
Django REST framework security vulnerability
Django REST framework is Django REST framework open source a powerful and flexible toolkit for building Web APIs. A security vulnerability exists in the Django REST framework prior to version 3.15.2, which stems from a cross-site scripting vulnerability in breaklongheaders...
OPENSUSE-SU-2024:14065-1 python310-django-allauth-0.63.3-1.1 on GA media
These are all security issues fixed in the python310-django-allauth-0.63.3-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2024-6226
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue is related to derived classes of the django.core.files.storage.Storage base class that override the generate filename function without replicating the...
PT-2024-6224
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password. This is due to the...
PT-2024-6225
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.13 Django versions 5.0 through 5.0.6 Description The issue is related to a potential denial of service attack via certain inputs with a very large number of brackets in the urlize and urlizetrunc functions. This...
Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...
OPENSUSE-SU-2024:13749-1 python310-Django-4.2.11-1.1 on GA media
These are all security issues fixed in the python310-Django-4.2.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13334-1 python310-Django-4.2.6-1.1 on GA media
These are all security issues fixed in the python310-Django-4.2.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12690-1 python310-Django-4.1.7-1.1 on GA media
These are all security issues fixed in the python310-Django-4.1.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12654-1 python310-Django-4.1.6-1.1 on GA media
These are all security issues fixed in the python310-Django-4.1.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10361-1 python3-Django-1.10.4-1.1 on GA media
These are all security issues fixed in the python3-Django-1.10.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14036-1 python310-social-auth-app-django-5.4.1-1.1 on GA media
These are all security issues fixed in the python310-social-auth-app-django-5.4.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13044-1 python310-Django-4.2.3-1.1 on GA media
These are all security issues fixed in the python310-Django-4.2.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11205-1 python36-Django-3.2.7-2.3 on GA media
These are all security issues fixed in the python36-Django-3.2.7-2.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12094-1 python310-Django-4.0.4-1.1 on GA media
These are all security issues fixed in the python310-Django-4.0.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11725-1 python310-Django-4.0.1-1.1 on GA media
These are all security issues fixed in the python310-Django-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...