Lucene search
+L

13169 matches found

Prion
Prion
•added 2022/12/15 9:15 p.m.•24 views

Cross site scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

5.8CVSS5.9AI score0.00558EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2022/12/15 9:15 p.m.•19 views

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00558EPSS
SaveExploits0References4Affected Software1
osv-pysec
osv-pysec
•added 2022/12/15 9:15 p.m.•27 views

PYSEC-2022-43061

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS5.9AI score0.00558EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/15 12:00 a.m.•34 views

CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

3.5CVSS6.1AI score0.00558EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/15 12:00 a.m.•3 views

CVE-2022-4526: Improper Neutralization

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS3.7AI score0.00558EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/15 12:00 a.m.•6 views

CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

3.5CVSS6.2AI score0.00558EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/15 12:00 a.m.•8 views

PT-2022-27451 · Unknown · Django-Photologue

Name of the Vulnerable Software and Affected Versions: django-photologue versions up to 3.15.1 Description: A vulnerability was found in the Default Template Handler component, specifically in the file photologue/templates/photologue/photo detail.html. The manipulation of the object.caption...

6.1CVSS5.8AI score0.00558EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2022/12/15 12:00 a.m.•14 views

Django-photologue 跨站脚本漏洞

Django-photologue is a powerful image management and gallery application for the Django web framework by Richard Barran, an individual developer. A security vulnerability exists in Django-photologue versions prior to 3.15.1, which stems from some unknown functionality in the Default Template...

6.1CVSS5.6AI score0.00558EPSS
SaveExploits0References4
Mend
Mend
•added 2022/12/15 12:00 a.m.•3 views

CVE-2022-4526

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

6.1CVSS0.00558EPSS
SaveExploits0References7
FreeBSD
FreeBSD
•added 2022/12/15 12:00 a.m.•30 views

py-django-photologue -- XSS vulnerability

domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argumen...

6.1CVSS6.8AI score0.00558EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/15 12:00 a.m.•108 views

CVE-2022-4526

The CVE-2022-4526 issue affects django-photologue versions up to 3.15.1. Affected code in photologue/templates/photologue/photo_detail.html, within the Default Template Handler, allows manipulation of the caption parameter (object.caption) to trigger cross-site scripting (XSS). The vulnerability ...

6.1CVSS4.7AI score0.00558EPSS
SaveExploits0References3Affected Software1
osv-cve
osv-cve
•added 2022/12/15 12:00 a.m.•26 views

CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting

A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...

3.5CVSS4.2AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/12/07 8:29 p.m.•18 views

Django: SQL injection in QuerySet.annotate(),aggregate() and extra()

A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely...

9.8CVSS7.1AI score0.18661EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux
•added 2022/12/07 8:29 p.m.•15 views

django: Denial-of-service possibility in file uploads

A flaw was found in Django. The issue occurs when passing certain inputs to multipart forms, resulting in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49527EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/12/07 8:29 p.m.•61 views

django: Possible XSS via '{% debug %}' template tag

A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...

6.1CVSS7AI score0.03356EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2022/12/07 7:19 p.m.•21 views

django: Denial-of-service possibility in file uploads

A flaw was found in Django. The issue occurs when passing certain inputs to multipart forms, resulting in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49527EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/12/07 7:19 p.m.•63 views

django: Possible XSS via '{% debug %}' template tag

A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...

6.1CVSS7AI score0.03356EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2022/12/07 7:19 p.m.•67 views

Low: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-django-horizon) security update

An update for python-django-horizon is now available for Red Hat OpenStack Platform 16.2.4 Train on Red Hat Enterprise Linux RHEL 8.4. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

6.5CVSS6.5AI score0.00554EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2022/12/01 10:55 p.m.•9 views

DJRCE

Django RCEDJRCE Simple django rce exploitation with leaked...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/11/24 12:00 a.m.•41 views

Debian: Security Advisory (DLA-3177-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.18661EPSS
SaveExploits3References3
Rows per page
Query Builder