Lucene search
K

1882 matches found

OSV
OSV
added 2019/08/02 3:15 p.m.27 views

CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS7.3AI score
Exploits0References10
Prion
Prion
added 2019/08/02 3:15 p.m.25 views

Open redirect

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

5CVSS8.2AI score0.06773EPSS
Exploits0References10Affected Software2
OSV
OSV
added 2019/08/02 3:15 p.m.1 views

PYSEC-2019-84

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

5.9AI score
Exploits0References10
Cvelist
Cvelist
added 2019/08/02 2:34 p.m.17 views

CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5AI score0.06773EPSS
Exploits0References10
CVE
CVE
added 2019/08/02 2:34 p.m.220 views

CVE-2019-14235

CVE-2019-14235 affects Django 1.11.x < 1.11.23, 2.1.x < 2.1.11, and 2.2.x

7.5CVSS7.3AI score0.06773EPSS
Exploits0References10Affected Software1
Debian CVE
Debian CVE
added 2019/08/02 2:34 p.m.32 views

CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS8.5AI score0.06773EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2019/08/02 2:34 p.m.45 views

CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS7.7AI score0.06773EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2019/08/01 10:0 a.m.19 views

CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS6.8AI score0.06773EPSS
Exploits0References2
OSV
OSV
added 2019/08/01 10:0 a.m.1 views

UBUNTU-CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

7.5CVSS6.8AI score0.06773EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2019/07/19 4:12 p.m.40 views

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656...

7.5CVSS7.5AI score0.00469EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2019/07/19 4:12 p.m.39 views

GHSA-5WV5-4VPF-PJ6M Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656...

8.7CVSS7.4AI score0.00469EPSS
Exploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2019/07/19 12:0 a.m.34 views

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656...

7.5CVSS7.4AI score0.00644EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2019/07/18 7:15 p.m.13 views

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

5.5CVSS5.9AI score0.00285EPSS
Exploits1References2
OSV
OSV
added 2019/07/18 7:15 p.m.6 views

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

5.5CVSS6.8AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2019/07/18 7:15 p.m.23 views

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

5.5CVSS6.7AI score0.00285EPSS
Exploits1References1
Veracode
Veracode
added 2019/07/18 2:30 a.m.17 views

Denial Of Service (DoS)

flask is vulnerable to denial of service. An attacker is able to crash the application from an unexpected memory usage by submitting malicious JSON data containing non-UTF8 charatcers...

7.5CVSS4.4AI score0.00469EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.2 views

The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.

The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to the lack of checks for the execution of the memory allocation command. Exploitation of this vulnerability could allow a malicious actor to cause service failures...

2.2CVSS5.7AI score
Exploits0Affected Software1
NVD
NVD
added 2019/07/17 2:15 p.m.19 views

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS7.5AI score0.00469EPSS
Exploits1References1
OSV
OSV
added 2019/07/17 2:15 p.m.30 views

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS7.5AI score
Exploits0References1
OSV
OSV
added 2019/07/17 2:15 p.m.1 views

DEBIAN-CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS7.6AI score0.00469EPSS
Exploits1References1
Rows per page
Query Builder