Lucene search
+L

771 matches found

NVD
NVD
added 2025/03/06 7:15 p.m.15 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS0.00799EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/06 7:15 p.m.3 views

DEBIAN-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits0References1
PyPA
PyPA
added 2025/03/06 7:15 p.m.17 views

PYSEC-2025-13

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7AI score0.00799EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
added 2025/03/06 3:41 p.m.5 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the django.utils.text.wrap function and wordwrap template filter. When either is supplied an excessively long string it may render the application unresponsive. Remediation Upgrade...

8.7CVSS6.9AI score0.00799EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/06 1:0 p.m.9 views

UBUNTU-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.00799EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/06 12:56 p.m.6 views

Malicious code in wrap.scrt.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb46cf4f945ffd141ee169ecf371a571f2692a3287c77efe8a9ea92c4811acb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.20 views

Django 安全漏洞

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

7.5CVSS7.4AI score0.00799EPSS
SaveExploits0References6
CVE
CVE
added 2025/03/06 12:0 a.m.306 views

CVE-2025-26699

CVE-2025-26699 concerns a potential denial-of-service in Django’s text handling: the wrap() function in django.utils.text and the wordwrap filter can be abused with very long strings. Public sources in the connected documents confirm affected versions: Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...

7.5CVSS7.1AI score0.00799EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2025/03/06 12:0 a.m.76 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS0.00799EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2024-47739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - padata: use integer wrap around to prevent deadlock on seqnr overflow When submitting more than 2^32 padata objects to padatadoserial, the current sorting...

7.5CVSS6.8AI score0.00679EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/22 12:0 a.m.12 views

openSUSE 15 Security Update : radare2 (openSUSE-SU-2025:0072-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0072-1 advisory. - CVE-2025-1378: Fixed memory corruption boo1237250 https://github.com/radareorg/radare2/releases/tag/5.9.0 Update to version 5.8.8: For details, check...

4.8CVSS5AI score0.00309EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2025/02/19 11:10 a.m.6 views

krb5: GSS message token handling

A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...

9.1CVSS7.2AI score0.01863EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/02/19 10:31 a.m.5 views

krb5: GSS message token handling

A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...

9.1CVSS7.2AI score0.01863EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2025/02/14 5:46 a.m.4 views

SUSE CVE-2024-5197

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpximaget struct may be invalid. Calling...

7.8CVSS8.2AI score0.00814EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2025/02/13 12:21 a.m.5 views

SUSE CVE-2024-57952

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

5.5CVSS6.4AI score0.00214EPSS
SaveExploits0References9
OSV
OSV
added 2025/02/12 2:15 p.m.4 views

DEBIAN-CVE-2024-57952

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

5.5CVSS5.7AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/12 2:15 p.m.10 views

UBUNTU-CVE-2024-57952

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

7.1CVSS6.2AI score0.00214EPSS
SaveExploits0References16
Vulnrichment
Vulnrichment
added 2025/02/12 1:52 p.m.4 views

CVE-2024-57952 Revert "libfs: fix infinite directory reads for offset dir"

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

7.1CVSS6AI score0.00214EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/12 1:52 p.m.21 views

CVE-2024-57952 Revert "libfs: fix infinite directory reads for offset dir"

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

7.1CVSS0.00214EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: padata: Use integer wrap-around to prevent deadlock in cases of seqnr overflow. When submitting more than 2^32 padata objects to padatadoserial, the current sorting implementation incorrectly sorts padata objects with overflowed...

7.5CVSS6.2AI score0.00679EPSS
SaveExploits0References3
Rows per page
Query Builder