Lucene search
+L

1481 matches found

OSV
OSV
added 2020/06/04 12:57 p.m.11 views

USN-4381-2 python-django vulnerabilities

USN-4381-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to cause a denial of...

6.1CVSS6.7AI score0.0609EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2020/06/04 12:57 p.m.90 views

USN-4381-2: Django vulnerabilities

USN-4381-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to cause a denial of...

6.1CVSS6.7AI score0.0609EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/06/03 4:52 p.m.36 views

CVE-2020-13254

A flaw was found in Django, where the memcached backend does not perform key validation and passes malformed keys. This flaw causes a key collision and potential data leakage. The highest threat from this vulnerability is to confidentiality...

4.3CVSS1.9AI score0.0609EPSS
SaveExploits0References4
NVD
NVD
added 2020/06/03 2:15 p.m.27 views

CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.1AI score0.0609EPSS
SaveExploits0References10
OSV
OSV
added 2020/06/03 2:15 p.m.5 views

DEBIAN-CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.3AI score0.0609EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/03 2:15 p.m.30 views

CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS7.1AI score
SaveExploits0References10
OSV
OSV
added 2020/06/03 2:15 p.m.10 views

PYSEC-2020-31

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.8AI score0.0609EPSS
SaveExploits0References11
Prion
Prion
added 2020/06/03 2:15 p.m.20 views

Input validation

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

4.3CVSS5.6AI score0.0609EPSS
SaveExploits0References10Affected Software5
PyPA
PyPA
added 2020/06/03 2:15 p.m.10 views

PYSEC-2020-31

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS7AI score0.0609EPSS
SaveExploits0References11Affected Software1
AlpineLinux
AlpineLinux
added 2020/06/03 1:11 p.m.141 views

CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.2AI score0.0609EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/06/03 1:11 p.m.52 views

CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

6AI score0.0609EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2020/06/03 1:11 p.m.29 views

CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.5AI score0.0609EPSS
SaveExploits0
CVE
CVE
added 2020/06/03 1:11 p.m.199 views

CVE-2020-13254

Django CVE-2020-13254 affects Django 2.2 (before 2.2.13) and 3.0 (before 3.0.7). Root cause: memcached backends that do not validate keys can produce key collisions with malformed cache keys, enabling potential data leakage. Multiple upstream advisories (Arch Linux ASA-202006-8; Debian DSA-4705-1...

5.9CVSS5.9AI score0.0609EPSS
SaveExploits0References10Affected Software1
Ubuntu
Ubuntu
added 2020/06/03 11:32 a.m.85 views

USN-4381-1: Django vulnerabilities

Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to cause a denial of service and obtain sensitive information. CVE-2020-13254 Jon Dufresne discovered that Django incorrectly encoded query parameters for the admin...

6.1CVSS6.7AI score0.0609EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2020/06/03 10:00 a.m.33 views

CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.8AI score0.0609EPSS
SaveExploits0References3
OSV
OSV
added 2020/06/03 10:00 a.m.9 views

UBUNTU-CVE-2020-13254

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...

5.9CVSS6.7AI score0.0609EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2020/06/03 12:00 a.m.16 views

PT-2020-5484

Name of the Vulnerable Software and Affected Versions Django versions 2.2 before 2.2.13 Django versions 3.0 before 3.0.7 Description The issue is related to errors in the certificate authentication procedure in the Django library. It may allow a remote attacker to gain unauthorized access to...

8.2CVSS6.7AI score0.0609EPSS
SaveExploits0References246
FreeBSD
FreeBSD
added 2020/06/01 12:00 a.m.36 views

Django -- multiple vulnerabilities

Django security release reports: CVE-2020-13254: Potential data leakage via malformed memcached keys In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage. In order to avoid this vulnerability,...

6.1CVSS4.1AI score0.0609EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/05/29 12:00 a.m.36 views

openSUSE Security Update : memcached (openSUSE-2020-721)

This update for memcached fixes the following issues : Security issue fixed : - CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. - CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. This update was imported from the SUSE:SLE-15:Update update project....

7.5CVSS6.6AI score0.02958EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.13 views

Vulnerability of the Server:Memcached component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server:Memcached component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the Memcached network protocol...

7.1CVSS6.5AI score0.03389EPSS
SaveExploits0References5Affected Software3
Rows per page
Query Builder