Lucene search
+L

7636 matches found

OSV
OSV
added 2020/08/11 9:15 p.m.25 views

DEBIAN-CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.3AI score0.00871EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/11 9:15 p.m.39 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.4AI score0.00871EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/08/11 9:15 p.m.25 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS7.1AI score0.00871EPSS
SaveExploits0References2
PyPA
PyPA
added 2020/08/11 9:15 p.m.12 views

PYSEC-2020-38

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.5CVSS6.7AI score0.00871EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/08/11 8:54 p.m.105 views

CVE-2020-17495

CVE-2020-17495 affects django-celery-results up to version 1.2.1: task results are stored in the database and may include the original task variables, which can contain sensitive cleartext data. The Red Hat entry reiterates that this data is stored unencrypted in the database, implying potential ...

7.5CVSS7.2AI score0.00871EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/11 8:54 p.m.46 views

CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

7.4AI score0.00871EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2020/08/03 5:29 a.m.180 views

Exploit for SQL Injection in Djangoproject Django

DOBBYISFREE! - 출제된 CTF: 2020 Christmas CTFhttps://dreamh...

9.8CVSS8.3AI score0.65575EPSS
SaveExploits9
Hacker One
Hacker One
added 2020/08/02 12:07 p.m.53 views

Mail.ru: SECRET_KEY Of Django Leaked In maps.me

Token for a internal Jenkins account of maps.me was leaked via git commit...

3.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/30 12:00 a.m.24 views

FreeBSD : Wagtail -- XSS vulnerability (e1d3a580-cd8b-11ea-bad0-08002728f74c)

GitHub Advisory Database : When a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp as directed in the documentation, any HTML tags used within a form field's he...

5.7CVSS5.5AI score0.01101EPSS
SaveExploits0References3
OSV
OSV
added 2020/07/29 2:31 p.m.32 views

SUSE-RU-2020:2072-1 Security update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper

This update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow,...

9.8CVSS8.4AI score0.99856EPSS
SaveExploits20References71
OSV
OSV
added 2020/07/27 2:07 p.m.8 views

SUSE-SU-2020:2055-1 Security update for python-Django

This update for python-Django fixes the following issues: - Fixed potential XSS in admin ForeignKeyRawIdWidget bsc1172166, CVE-2020-13596...

6.1CVSS6.5AI score0.02897EPSS
SaveExploits0References3
Gitee
Gitee
added 2020/07/27 10:33 a.m.7 views

vulscan

This is a Python-based web application for vulnerability scanning and management. Here's a summary of the key features and functionality: Overview The application is built using Django, a Python web framework, and is designed to provide a user-friendly interface for vulnerability scanning and...

7.1AI score
SaveExploits0
OSV
OSV
added 2020/07/20 6:15 p.m.17 views

CVE-2020-15118

In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp, any HTML tags used within a form field's help text will be...

5.4CVSS5.4AI score
SaveExploits0References5
Prion
Prion
added 2020/07/20 6:15 p.m.15 views

Cross site scripting

In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp, any HTML tags used within a form field's help text will be...

3.5CVSS5.4AI score0.01101EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2020/07/20 5:50 p.m.73 views

Cross-Site Scripting in Wagtail

Impact When a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp as directed in the documentation, any HTML tags used within a form field's help text will be...

5.7CVSS5.4AI score0.01101EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2020/07/20 5:50 p.m.15 views

GHSA-2473-9HGQ-J7XW Cross-Site Scripting in Wagtail

Impact When a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp as directed in the documentation, any HTML tags used within a form field's help text will be...

7.2CVSS5.5AI score0.01101EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2020/07/20 5:50 p.m.35 views

CVE-2020-15118 Cross-Site Scripting in Wagtail

In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp, any HTML tags used within a form field's help text will be...

5.7CVSS5.5AI score0.01101EPSS
SaveExploits0References5
CVE
CVE
added 2020/07/20 5:50 p.m.94 views

CVE-2020-15118

CVE-2020-15118 affects Wagtail versions before 2.7.4 and 2.9.3, where HTML in form field help_text can be rendered unescaped when using Django form rendering helpers (e.g., form.as_p). This enables potential cross-site scripting via editor-controlled help text. Patches are available: Wagtail 2.7....

5.7CVSS5.4AI score0.01101EPSS
SaveExploits0References5Affected Software1
FreeBSD
FreeBSD
added 2020/07/20 12:00 a.m.48 views

Wagtail -- XSS vulnerability

GitHub Advisory Database: When a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and the page template is built using Django's standard form rendering helpers such as form.asp as directed in the documentation, any HTML tags used within a form field's hel...

5.7CVSS0.8AI score0.01101EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/14 12:42 p.m.20 views

SUSE-SU-2020:1901-1 Security update for ansible, ansible1, ardana-ansible, ardana-cluster, ardana-freezer, ardana-input-model, ardana-logging, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-dashboard, openstack-dashboard-theme-HPE, openstack-heat-templates, openstack-keystone, openstack-monasca-agent, openstack-monasca-installer, openstack-neutron, openstack-octavia-amphora-image, python-Django, python-Flask, python-GitPython, python-Pillow, python-amqp, python-apicapi, python-keystoneauth1, python-oslo.messaging, python-psutil, python-pyroute2, python-pysaml2, python-tooz, python-waitress, storm

This update for ansible, ansible1, ardana-ansible, ardana-cluster, ardana-freezer, ardana-input-model, ardana-logging, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana,...

9.8CVSS9.2AI score0.99856EPSS
SaveExploits8References59
Rows per page
Query Builder