Lucene search
+L

3560 matches found

OSV
OSV
added 2025/03/06 7:15 p.m.8 views

PYSEC-2025-13

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.00799EPSS
SaveExploits0References6
NVD
NVD
added 2025/03/06 7:15 p.m.15 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS0.00799EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/06 7:15 p.m.3 views

DEBIAN-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/06 1:0 p.m.9 views

UBUNTU-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.00799EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/06 5:15 a.m.15 views

CVE-2025-20916

Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.20 views

Django 安全漏洞

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

7.5CVSS7.4AI score0.00799EPSS
SaveExploits0References6
CVE
CVE
added 2025/03/06 12:0 a.m.305 views

CVE-2025-26699

CVE-2025-26699 concerns a potential denial-of-service in Django’s text handling: the wrap() function in django.utils.text and the wordwrap filter can be abused with very long strings. Public sources in the connected documents confirm affected versions: Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...

7.5CVSS7.1AI score0.00799EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/06 12:0 a.m.12 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7.1AI score0.00799EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/03/06 12:0 a.m.7 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/03/06 12:0 a.m.119 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.2AI score0.00799EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2015-4041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of byte...

7.8CVSS8.3AI score0.00518EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/02/28 8:29 a.m.34 views

CVE-2025-22492 Insecure storage of connection strings in FRS

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software FRS VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS...

6.3CVSS0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.13 views

PT-2025-8935 · Trivision · Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security issue exists in the transmission of passwords through query strings, potentially exposing confidential information to third parties. Recommendations: At the moment, there is no...

6.2CVSS7AI score0.0017EPSS
SaveExploits2References4
OSV
OSV
added 2025/02/26 7:1 a.m.6 views

UBUNTU-CVE-2022-49436

In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: Fix leaking nvdimmeventsmap elements Right now 'char ' elements allocated for individual 'statid' in 'paprscmpriv.nvdimmeventsmap' during paprscmpmucheckevents, get leaked in paprscmremove and paprscmpmuregister,...

5.5CVSS6.5AI score0.00218EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/02/22 12:0 a.m.8 views

SUSE SLES12 Security Update : postgresql16 (SUSE-SU-2025:0637-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0637-1 advisory. Upgrade to 16.8: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Tenable has extracted...

8.1CVSS8AI score0.9003EPSS
SaveExploits10References4
OSV
OSV
added 2025/02/21 2:15 p.m.14 views

SUSE-SU-2025:0636-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: Upgrade to 16.8: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093...

8.1CVSS8.1AI score0.9003EPSS
SaveExploits10References3
SUSE Linux
SUSE Linux
added 2025/02/21 2:13 p.m.7 views

Security update for postgresql16

This update for postgresql16 fixes the following issues: Upgrade to 16.8: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.8CVSS8.2AI score0.9003EPSS
SaveExploits10References4
OSV
OSV
added 2025/02/21 10:47 a.m.9 views

SUSE-SU-2025:0619-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.20: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093...

8.1CVSS8.2AI score0.9003EPSS
SaveExploits10References3
OSV
OSV
added 2025/02/21 10:44 a.m.11 views

SUSE-SU-2025:0618-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: Upgrade to 17.4: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093...

8.1CVSS8.2AI score0.9003EPSS
SaveExploits10References3
SUSE Linux
SUSE Linux
added 2025/02/14 7:20 a.m.7 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.75 jscECO-3319: Added Ism profile for OL8, OL9 Added new product kylinserver10 Created OL10 product Release SLMicro5 product Replaced two date injections by SOURCEDATEEPOCH to make reproducible bsc1230361 Updat...

5.7CVSS7.6AI score0.00172EPSS
SaveExploits0References34
Rows per page
Query Builder