Lucene search
K

22 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в python-django

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is susceptible to a potential Denial-of-Service DoS attack due to certain inputs containing a very large number of Unicode characters...

7.5CVSS6.7AI score0.00406EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000166 advisory. In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certa...

7.5CVSS6.6AI score0.00406EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/04/23 5:18 p.m.2 views

python-django: Potential denial of service vulnerability in ``django.utils.encoding.uri_to_iri()``

An uncontrolled resource consumption vulnerability was found in Django. Feeding certain inputs with a very large number of Unicode characters to the URI to IRI encoder function can lead to a denial of service...

7.5CVSS7.1AI score0.00406EPSS
Exploits0References5
OSV
OSV
added 2023/11/03 6:36 a.m.0 views

GHSA-7H4P-27MH-HMRW Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

6.9CVSS5.9AI score0.00406EPSS
Exploits0References15
OSV
OSV
added 2023/11/03 5:15 a.m.1 views

DEBIAN-CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.5AI score0.00406EPSS
Exploits0References1
OSV
OSV
added 2023/11/03 5:15 a.m.0 views

PYSEC-2023-225

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.8AI score0.00406EPSS
Exploits0References3
PyPA
PyPA
added 2023/11/03 5:15 a.m.4 views

PYSEC-2023-225

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.9AI score0.00406EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/09/06 2:0 a.m.2 views

SUSE CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

6.5CVSS7.8AI score0.00406EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:10 a.m.1 views

SUSE CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

5.3CVSS9.5AI score0.06773EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2020/10/28 6:24 p.m.2 views

Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri()

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS7.4AI score0.06773EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/04/06 9:2 a.m.2 views

Django: Potential memory exhaustion in django.utils.encoding.uri_to_iri()

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS7.4AI score0.06773EPSS
Exploits0References5
OSV
OSV
added 2019/08/06 1:43 a.m.0 views

GHSA-V9QG-3J8P-R63V Uncontrolled Recursion in Django

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

8.7CVSS6.8AI score0.06773EPSS
Exploits0References14
OSV
OSV
added 2019/08/02 3:15 p.m.0 views

PYSEC-2019-14

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS6.8AI score0.06773EPSS
Exploits0References11
Prion
Prion
added 2019/08/02 3:15 p.m.24 views

Open redirect

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

5CVSS8.2AI score0.06773EPSS
Exploits0References10Affected Software2
PyPA
PyPA
added 2019/08/02 3:15 p.m.4 views

PYSEC-2019-14

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS6.9AI score0.06773EPSS
Exploits0References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/04/08 12:0 a.m.29 views

Debian DSA-4425-1 : wget - security update

Kusano Kazuhiko discovered a buffer overflow vulnerability in the handling of Internationalized Resource Identifiers IRI in wget, a network utility to retrieve files from the web, which could result in the execution of arbitrary code or denial of service when recursively downloading from an...

9.8CVSS8.9AI score0.01517EPSS
Exploits0References5
Debian
Debian
added 2019/04/05 9:22 p.m.34 views

[SECURITY] [DSA 4425-1] wget security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4425-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 05, 2019 https://www.debian.org/security/faq -...

7.5CVSS2.3AI score0.01517EPSS
Exploits0
Debian
Debian
added 2019/04/05 9:22 p.m.167 views

[SECURITY] [DSA 4425-1] wget security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4425-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 05, 2019 https://www.debian.org/security/faq -...

9.8CVSS10AI score0.01517EPSS
Exploits0
OSV
OSV
added 2014/04/09 10:57 a.m.2 views

UBUNTU-CVE-2014-1723

The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...

7.5CVSS7.3AI score0.01207EPSS
Exploits1References5
CVE
CVE
added 2014/04/09 10:0 a.m.58 views

CVE-2014-1723

CVE-2014-1723 corresponds to a vulnerability in Google Chrome prior to version 34.0.1847.116 where the UnescapeURLWithOffsetsImpl function in net/base/escape.cc failed to correctly handle bidirectional IRIs, enabling remote attackers to spoof URLs via crafted RTL Unicode text. Public fixes are re...

7.5CVSS6AI score0.01207EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder