Lucene search
+L

6485 matches found

Tenable Nessus
Tenable Nessus
•added 2023/11/06 12:00 a.m.•39 views

Rocky Linux 8 : rust-toolset:rhel8 (RLSA-2021:4590)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4590 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
•added 2023/11/06 12:00 a.m.•43 views

Rocky Linux 8 : gcc-toolset-10-annobin (RLSA-2021:4592)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4592 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
•added 2023/11/06 12:00 a.m.•40 views

Rocky Linux 8 : annobin (RLSA-2021:4593)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4593 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References3
Github Security Blog
Github Security Blog
•added 2023/11/03 6:36 a.m.•48 views

Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7.1AI score0.01519EPSS
SaveExploits0References15Affected Software1
OSV
OSV
•added 2023/11/03 6:36 a.m.•19 views

GHSA-7H4P-27MH-HMRW Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

6.9CVSS5.9AI score0.01519EPSS
SaveExploits0References15
NVD
NVD
•added 2023/11/03 5:15 a.m.•33 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7.3AI score0.01519EPSS
SaveExploits0References7
OSV
OSV
•added 2023/11/03 5:15 a.m.•10 views

DEBIAN-CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.5AI score0.01519EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/03 5:15 a.m.•28 views

Design/Logic Flaw

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

5CVSS7.3AI score0.01519EPSS
SaveExploits0References5Affected Software2
PyPA
PyPA
•added 2023/11/03 5:15 a.m.•19 views

PYSEC-2023-225

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.9AI score0.01519EPSS
SaveExploits0References4Affected Software1
osv-pysec
osv-pysec
•added 2023/11/03 5:15 a.m.•23 views

PYSEC-2023-225

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.8AI score0.01519EPSS
SaveExploits0References4
Veracode
Veracode
•added 2023/11/03 4:15 a.m.•33 views

Denial Of Service (DoS)

Django is vulnerable to Denial Of Service DoS. The vulnerability exists in the topython functionality within the UsernameField class of forms.py. It fails to implement a maximum length check for the NFKC normalization, which allows an attacker to potentially crash the application on Windows by...

7.5CVSS6.9AI score0.49774EPSS
SaveExploits0References9Affected Software1
Mend
Mend
•added 2023/11/03 12:00 a.m.•2 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

8.7CVSS0.01519EPSS
SaveExploits0References24
Cvelist
Cvelist
•added 2023/11/03 12:00 a.m.•79 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.6AI score0.01519EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/03 12:00 a.m.•3 views

CVE-2023-41164: Improper Validation of Specified Quantity in Input

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7.2AI score0.01519EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2023/11/03 12:00 a.m.•32 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.1AI score
SaveExploits0References9
Debian CVE
Debian CVE
•added 2023/11/03 12:00 a.m.•106 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS6.6AI score0.01519EPSS
SaveExploits0
CVE
CVE
•added 2023/11/03 12:00 a.m.•313 views

CVE-2023-41164

CVE-2023-41164 affects Django versions where uri_to_iri() is vulnerable to a DoS via inputs with a vast number of Unicode characters. Affected are Django 3.2 before 3.2.21, Django 4.1 before 4.1.11, and Django 4.2 before 4.2.5. The root cause is described as a potential denial-of-service in djang...

7.5CVSS7.2AI score0.01519EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
•added 2023/11/03 12:00 a.m.•115 views

CVE-2023-41164

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via certain inputs with a very large number of Unicode characters...

7.5CVSS7.5AI score0.01519EPSS
SaveExploits0
OSV
OSV
•added 2023/11/02 6:30 a.m.•17 views

GHSA-QMF9-6JQF-J8FQ Django potential denial of service vulnerability in UsernameField on Windows

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS denial of service attack via certain inputs with a very large number of...

8.7CVSS7.1AI score0.49774EPSS
SaveExploits0References11
NVD
NVD
•added 2023/11/02 6:15 a.m.•39 views

CVE-2023-46695

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS denial of service attack via certain inputs with a very large number of...

7.5CVSS7.5AI score0.49774EPSS
SaveExploits0References4
Rows per page
Query Builder