Lucene search
+L

1249 matches found

NVD
NVD
•added 2025/03/06 7:15 p.m.•24 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS0.0083EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/03/06 3:41 p.m.•12 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the django.utils.text.wrap function and wordwrap template filter. When either is supplied an excessively long string it may render the application unresponsive. Remediation Upgrade...

8.7CVSS6.9AI score0.0083EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/06 1:00 p.m.•19 views

UBUNTU-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.1AI score0.0083EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/06 12:56 p.m.•9 views

Malicious code in wrap.scrt.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb46cf4f945ffd141ee169ecf371a571f2692a3287c77efe8a9ea92c4811acb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
CVE
CVE
•added 2025/03/06 12:00 a.m.•352 views

CVE-2025-26699

CVE-2025-26699 concerns a potential denial-of-service in Django’s text handling: the wrap() function in django.utils.text and the wordwrap filter can be abused with very long strings. Public sources in the connected documents confirm affected versions: Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...

7.5CVSS7.1AI score0.0083EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/03/06 12:00 a.m.•87 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS0.0083EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•38 views

Django 安全漏洞

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

7.5CVSS7.4AI score0.0083EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2024-47739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - padata: use integer wrap around to prevent deadlock on seqnr overflow When submitting more than 2^32 padata objects to padatadoserial, the current sorting...

7.5CVSS6.8AI score0.00679EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•5 views

CVE-2022-49199: Integer Underflow (Wrap or Wraparound)

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldevstatsetcounterdynamicdoit This code checks "index" for an upper bound but it does not check for negatives. Change the type to unsigned to prevent underflows...

5.5CVSS5.8AI score0.00265EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/22 12:00 a.m.•17 views

openSUSE 15 Security Update : radare2 (openSUSE-SU-2025:0072-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0072-1 advisory. - CVE-2025-1378: Fixed memory corruption boo1237250 https://github.com/radareorg/radare2/releases/tag/5.9.0 Update to version 5.8.8: For details, check...

4.8CVSS5AI score0.00315EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2025/02/19 11:10 a.m.•14 views

krb5: GSS message token handling

A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...

9.1CVSS7.2AI score0.01863EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/02/19 10:31 a.m.•14 views

krb5: GSS message token handling

A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...

9.1CVSS7.2AI score0.01863EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/02/14 5:46 a.m.•11 views

SUSE CVE-2024-5197

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpximaget struct may be invalid. Calling...

7.8CVSS7.3AI score0.00814EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2025/02/13 12:21 a.m.•9 views

SUSE CVE-2024-57952

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

5.5CVSS6.4AI score0.0022EPSS
SaveExploits0References9
OSV
OSV
•added 2025/02/12 2:15 p.m.•8 views

DEBIAN-CVE-2024-57952

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

5.5CVSS5.7AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/12 2:15 p.m.•15 views

UBUNTU-CVE-2024-57952

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

7.1CVSS6.2AI score0.0022EPSS
SaveExploits0References16
Vulnrichment
Vulnrichment
•added 2025/02/12 1:52 p.m.•6 views

CVE-2024-57952 Revert "libfs: fix infinite directory reads for offset dir"

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

7.1CVSS6AI score0.0022EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/02/12 1:52 p.m.•31 views

CVE-2024-57952 Revert "libfs: fix infinite directory reads for offset dir"

In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...

7.1CVSS0.0022EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•21 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-47739)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47739 advisory. - In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to preve...

7.5CVSS6.2AI score0.00679EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/04 12:00 a.m.•12 views

PT-2025-6760

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The current directory offset allocator stores the next offset value to return in octx-next offset. This mechanism typically returns values that increase monotonically over time...

7.8CVSS6.5AI score0.0022EPSS
SaveExploits0
Rows per page
Query Builder