python-django vulnerabilities (Red Hat)
316 vulnerabilities.
python-djangoRed HatDjango denial-of-service vulnerability in internationalized URLs7.5 Highpython-djangoRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highpython-djangoRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highpython-djangoRed HatDoS in SnakeYAML6.5 Mediumpython-djangoRed HatDoS in SnakeYAML6.5 Mediumpython-djangoRed HatDoS in SnakeYAML6.5 Mediumpython-djangoRed HatDoS in SnakeYAML6.5 Mediumpython-djangoRed HatDenial of Service (DoS)7.5 Highpython-djangoRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 Highpython-djangoRed HatActive Record RCE bug with Serialized Columns9.8 Criticalpython-djangoRed HatApache Commons Configuration insecure interpolation defaults9.8 Criticalpython-djangoRed HatThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 Mediumpython-djangoRed HatDjango `Trunc()` and `Extract()` database functions vulnerable to SQL Injection9.8 Criticalpython-djangoRed HatRails::Html::Sanitizer vulnerable to Cross-site Scripting6.1 Mediumpython-djangoRed HatThe c_rehash script allows command injection7.3 Highpython-djangoRed HatImproper Handling of Unexpected Data Type in Nokogiri8.2 Highpython-djangoRed HatThe c_rehash script allows command injection7.3 Highpython-djangoRed Hatsinatra does not validate expanded path matches7.5 Highpython-djangoRed HatXSS Vulnerability in Action View tag helpers6.1 Mediumpython-djangoRed HatCross-site Scripting Vulnerability in Action Pack6.1 Mediumpython-djangoRed HatCommand Injection8.1 Highpython-djangoRed HatSQL Injection in Django9.8 Criticalpython-djangoRed HatSQL Injection in Django9.8 Criticalpython-djangoRed HatInefficient Regular Expression Complexity in Nokogiri7.5 Highpython-djangoRed HatImproper Certificate Validation in kubeclient8.1 Highpython-djangoRed HatTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 Mediumpython-djangoRed HatInformation Exposure when using Puma with Rails8.0 Highpython-djangoRed HatExposure of sensitive information in Action Pack7.4 Highpython-djangoRed HatInfinite Loop in Django7.5 Highpython-djangoRed HatCross-site Scripting in Django6.1 Mediumpython-djangoRed HatDenial of service in sidekiq7.5 Highpython-djangoRed HatDirectory-traversal in Django5.3 Mediumpython-djangoRed HatInformation disclosure in Django7.5 Highpython-djangoRed HatDenial-of-service in Django7.5 Highpython-djangoRed HatA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 Highpython-djangoRed HatRCE from attacker with configuration edit priviledges through JNDI lookup6.6 Mediumpython-djangoRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 Highpython-djangoRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumpython-djangoRed HatPotential bypass of an upstream access control based on URL paths in Django7.3 Highpython-djangoRed HatInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Lowpython-djangoRed HatRegular Expression Denial of Service in sqlparse7.5 Highpython-djangoRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Highpython-djangoRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Highpython-djangoRed HatBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 Highpython-djangoRed HatBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 Highpython-djangoRed HatBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 Highpython-djangoRed HatBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...7.5 Highpython-djangoRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 Highpython-djangoRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 Mediumpython-djangoRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Medium- Show moreLoading…