1153 matches found
Ubuntu: Security Advisory (USN-6722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6722-1: Django vulnerability
Simon Charette discovered that the password reset functionality in Django used a Unicode case insensitive query to retrieve accounts associated with an email address. An attacker could possibly use this to obtain password reset tokens and hijack accounts...
SUSE-SU-2024:1141-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Align the patch with the upstream one and make it more robust. bsc1220358...
SUSE-SU-2024:1140-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Align the patch with the upstream one and make it more robust. bsc1220358...
Mageia: Security Advisory (MGASA-2024-0075)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated python-django package fixes a security vulnerability
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. CVE-2024-27351...
MGASA-2024-0075 Updated python-django package fixes a security vulnerability
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words method with html=True and the truncatewordshtml template filter are subject to a potential regular expression denial-of-service attack via a crafted string. CVE-2024-27351...
openSUSE 15 Security Update : python-Django (SUSE-SU-2024:0902-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:0902-1 advisory. - CVE-2024-27351: Fixed a regular expression DoS in django.utils.text.Truncator.words bsc1220358 Tenable has extracted the preceding description block direct...
SUSE-SU-2024:0902-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a regular expression DoS in django.utils.text.Truncator.words bsc1220358...
SUSE-SU-2024:0875-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-24680: Fixed a denial-of-service in intcomma template filter bsc1219683. - CVE-2024-27351: Fixed potential regular expression denial-of-service in django.utils.text.Truncator.words bsc1220358...
OPENSUSE-SU-2024:0080-1 Security update for python-Django1
This update for python-Django1 fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...
OPENSUSE-SU-2024:0077-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words boo1220358...
Security update for python-Django (important)
openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2024:0077-1 Rating: important References: 1220358 Cross-References: CVE-2024-27351 CVSS scores: CVE-2024-27351 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...
Ubuntu: Security Advisory (USN-6674-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-6674-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6674-2: Django vulnerability
USN-6674-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause...
USN-6674-1: Django vulnerability
Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service...
USN-6674-1 python-django vulnerability
Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service...
openSUSE: Security Advisory for python (openSUSE-SU-2023:0310-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3744-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...