Lucene search
K

3357 matches found

Veracode
Veracode
added 2025/03/11 6:29 a.m.7 views

Denial Of Service (DoS)

Django is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing due to the django.utils.text.wrap method and wordwrap template filter, which can be exploited using very long strings to cause excessive resource consumption...

7.5CVSS6.5AI score0.00748EPSS
Exploits0References8Affected Software2
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.3 views

Pimcore SQL注入漏洞

Pimcore is an open source data and experience management platform. A SQL injection vulnerability exists in Pimcore. The vulnerability stems from the fact that an authenticated user can construct filter strings that lead to SQL injection, which can be exploited by an attacker to execute arbitrary...

8.8CVSS8.3AI score0.00449EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/03/11 12:0 a.m.5 views

PT-2025-10894

Name of the Vulnerable Software and Affected Versions: Babel versions prior to 7.26.10 Babel versions prior to 8.0.0-alpha.17 Description: The issue arises when using Babel to compile regular expression named capturing groups and the .replace method on a regular expression that contains named...

6.2CVSS5.8AI score0.00478EPSS
Exploits0References14
OSV
OSV
added 2025/03/10 8:15 a.m.14 views

BIT-DJANGO-2024-39614

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. getsupportedlanguagevariant was subject to a potential denial-of-service attack when used with very long strings containing specific characters...

7.5CVSS7AI score0.30129EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/03/08 12:41 a.m.6 views

CVE-2025-26699

A potential denial of service vulnerability exists in django.utils.text.wrap and the wordwrap template filter. When processing extremely long strings, these functions may cause excessive resource consumption, potentially leading to service disruption. Mitigation Mitigation for this issue is eithe...

7.5CVSS4.8AI score0.00748EPSS
Exploits0References3
OSV
OSV
added 2025/03/06 9:31 p.m.0 views

GHSA-P3FP-8748-VQFQ Django vulnerable to Allocation of Resources Without Limits or Throttling

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7.1AI score0.00748EPSS
Exploits0References8
NVD
NVD
added 2025/03/06 7:15 p.m.10 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS0.00748EPSS
Exploits0References5
OSV
OSV
added 2025/03/06 7:15 p.m.2 views

DEBIAN-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.00748EPSS
Exploits0References1
OSV
OSV
added 2025/03/06 7:15 p.m.1 views

PYSEC-2025-13

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.00748EPSS
Exploits0References6
OSV
OSV
added 2025/03/06 1:0 p.m.4 views

UBUNTU-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.00748EPSS
Exploits0References3
OSV
OSV
added 2025/03/06 5:15 a.m.4 views

CVE-2025-20916

Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

7.5CVSS5.8AI score0.00255EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/06 12:0 a.m.12 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7.1AI score0.00748EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.2 views

Django 安全漏洞

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

7.5CVSS7.4AI score0.00748EPSS
Exploits0References6
CVE
CVE
added 2025/03/06 12:0 a.m.283 views

CVE-2025-26699

CVE-2025-26699 concerns a potential denial-of-service in Django’s text handling: the wrap() function in django.utils.text and the wordwrap filter can be abused with very long strings. Public sources in the connected documents confirm affected versions: Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...

7.5CVSS7.1AI score0.00748EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2025/03/06 12:0 a.m.4 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.00748EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2025/03/06 12:0 a.m.4 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.2AI score0.00748EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2015-4041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of byte...

7.8CVSS8.3AI score0.00522EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/02/28 8:29 a.m.17 views

CVE-2025-22492 Insecure storage of connection strings in FRS

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software FRS VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS...

6.3CVSS0.00153EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.2 views

PT-2025-8935 · Trivision · Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security issue exists in the transmission of passwords through query strings, potentially exposing confidential information to third parties. Recommendations: At the moment, there is no...

6.2CVSS7AI score0.00163EPSS
Exploits2References4
OSV
OSV
added 2025/02/26 7:1 a.m.1 views

UBUNTU-CVE-2022-49436

In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: Fix leaking nvdimmeventsmap elements Right now 'char ' elements allocated for individual 'statid' in 'paprscmpriv.nvdimmeventsmap' during paprscmpmucheckevents, get leaked in paprscmremove and paprscmpmuregister,...

5.5CVSS6.5AI score0.00204EPSS
Exploits0References5
Rows per page
Query Builder