Lucene search
+L

16007 matches found

vulnersOsv
vulnersOsv
•added 2025/03/06 12:00 a.m.•2 views

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +143 more potentially affected by CVE-2025-26699 via django (>=4.2.0, <=4.2.19)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2025-26699 Source advisory: MEND:CVE-2025-26699...

7.5CVSS0.0083EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/03/06 12:00 a.m.•1 views

aldryn-django (>=5.0.2.0, <=5.0.11.0), artd-customer (>=0.0.20, <=0.0.23) +78 more potentially affected by CVE-2025-26699 via django (>=5.0.0, <=5.0.12)

django PYPI version =5.0.0, =5.0.2.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2025-26699 Source advisory: MEND:CVE-2025-26699...

7.5CVSS0.0083EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/03/06 12:00 a.m.•1 views

aldryn-django (>=5.1.4.0, <=5.1.5.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +48 more potentially affected by CVE-2025-26699 via django (>=5.1.0, <=5.1.6)

django PYPI version =5.1.0, =5.1.4.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.1.7, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 and more Source cves: CVE-2025-26699 Source advisory: MEND:CVE-2025-26699...

7.5CVSS0.0083EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2025-26699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap...

7.5CVSS6.6AI score0.0083EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-56374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings...

7.5CVSS6.6AI score0.01277EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-53907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to ...

7.5CVSS6.6AI score0.01388EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/06 12:00 a.m.•92 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS0.0083EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•4 views

PT-2025-9994

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.19 Django versions 5.0 through 5.0.12 Django versions 5.1 through 5.1.6 Description A potential denial-of-service attack can occur when the django.utils.text.wrap method and wordwrap template filter are used wit...

7.5CVSS6.7AI score0.1431EPSS
SaveExploits0References143
Vulnrichment
Vulnrichment
•added 2025/03/06 12:00 a.m.•13 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7.1AI score0.0083EPSS
SaveExploits0References3
Mend
Mend
•added 2025/03/06 12:00 a.m.•6 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS0.0083EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•6 views

CVE-2025-26699: Allocation of Resources Without Limits or Throttling

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS6.5AI score0.0083EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/06 12:00 a.m.•357 views

CVE-2025-26699

CVE-2025-26699 concerns a potential denial-of-service in Django’s text handling: the wrap() function in django.utils.text and the wordwrap filter can be abused with very long strings. Public sources in the connected documents confirm affected versions: Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...

7.5CVSS7.1AI score0.0083EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•40 views

Django security vulnerabilities

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

7.5CVSS7.4AI score0.0083EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/03/06 12:00 a.m.•28 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2025/03/06 12:00 a.m.•13 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.0083EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/03/06 12:00 a.m.•133 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.2AI score0.0083EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/03/05 2:29 p.m.•21 views

Moderate: Red Hat Security Advisory: Satellite 6.16.3 Async Update

A new release is now available for Red Hat Satellite 6.16 for RHEL 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

7.8CVSS6.7AI score0.01277EPSS
SaveExploits0References21
RedHat Linux
RedHat Linux
•added 2025/03/05 2:29 p.m.•18 views

django: potential denial-of-service vulnerability in IPv6 validation

A flaw was found in the Django framework. Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial of service attack. The undocumented and private functions cleanipv6address and isvalidipv6address were vulnerable, as was the...

7.5CVSS7.1AI score0.01277EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2024-45230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a...

7.5CVSS6.5AI score0.25773EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2024-41989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when give...

7.5CVSS6.7AI score0.012EPSS
SaveExploits0References2
Rows per page
Query Builder