python-Django vulnerabilities (openSUSE)
110 vulnerabilities.
-
python-DjangoopenSUSE Privilege abuse in model formsets with editable primary keys 5.3 Medium -
python-DjangoopenSUSE Potential request forgery via spatial lookup byte values 6.9 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability in HTTP header parsing 6.9 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability in get_supported_language_variant() 6.9 Medium -
python-DjangoopenSUSE Potential cross-site scripting via URLField values in the admin 5.1 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability via nested geometry collections 6.9 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability in check_for_language() 6.9 Medium -
python-DjangoopenSUSE Server-side file-write and request forgery via spatial lookups 8.7 High -
python-DjangoopenSUSE Header injection possibility since DomainNameValidator accepted newlines in input 5.3 Medium -
python-DjangoopenSUSE Heap buffer over-read in GDALRaster 6.3 Medium -
python-DjangoopenSUSE Potential exposure of private data via cached Set-Cookie response 2.3 Low -
python-DjangoopenSUSE Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware 2.3 Low -
python-DjangoopenSUSE Potential unencrypted email transmission via STARTTLS in the SMTP backend 2.3 Low -
python-DjangoopenSUSE Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie 2.3 Low -
python-DjangoopenSUSE Potential exposure of private data via whitespace padding in Vary header 2.3 Low -
python-DjangoopenSUSE Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware 2.3 Low -
python-DjangoopenSUSE Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware 2.3 Low -
python-DjangoopenSUSE Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass 6.3 Medium -
python-DjangoopenSUSE Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST 2.3 Low -
python-DjangoopenSUSE Privilege abuse in ModelAdmin.list_editable 2.7 Low -
python-DjangoopenSUSE Privilege abuse in GenericInlineModelAdmin 9.8 Critical -
python-DjangoopenSUSE ASGI header spoofing via underscore/hyphen conflation 7.5 High -
python-DjangoopenSUSE Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass 7.5 High -
python-DjangoopenSUSE Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload 6.5 Medium -
python-DjangoopenSUSE Potential incorrect permissions on newly created file system objects 3.7 Low -
python-DjangoopenSUSE Potential SQL injection via QuerySet.order_by and FilteredRelation 5.4 Medium -
python-DjangoopenSUSE Potential SQL injection in column aliases via control characters 5.4 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods 7.5 High -
python-DjangoopenSUSE Potential SQL injection via raster lookups on PostGIS 5.4 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability via repeated headers when using ASGI 7.5 High -
python-DjangoopenSUSE Username enumeration through timing difference in mod_wsgi authentication handler 5.3 Medium -
python-DjangoopenSUSE Potential denial-of-service vulnerability in XML serializer text extraction 7.5 High -
python-DjangoopenSUSE Potential SQL injection in FilteredRelation column aliases on PostgreSQL 4.3 Medium -
python-DjangoopenSUSE Security update for python-Django No score -
python-DjangoopenSUSE Potential SQL injection via _connector keyword argument in QuerySet and Q objects 9.1 Critical -
python-DjangoopenSUSE Django vulnerable to partial directory traversal via archives 3.1 Low -
python-DjangoopenSUSE Django vulnerable to SQL injection in column aliases 7.1 High -
python-DjangoopenSUSE Django Improper Output Neutralization for Logs vulnerability 4.0 Medium -
python-DjangoopenSUSE Django has a denial-of-service possibility in strip_tags() 5.3 Medium -
python-DjangoopenSUSE Django Potential Denial of Service (DoS) on Windows 5.8 Medium -
python-DjangoopenSUSE Django is subject to SQL injection through its column aliases 7.1 High -
python-DjangoopenSUSE Django vulnerable to Allocation of Resources Without Limits or Throttling 5.0 Medium -
python-DjangoopenSUSE Django has a potential denial-of-service vulnerability in IPv6 validation 5.8 Medium -
python-DjangoopenSUSE Django SQL injection in HasKey(lhs, rhs) on Oracle 9.8 Critical -
python-DjangoopenSUSE Django denial-of-service in django.utils.html.strip_tags() 7.5 High -
python-DjangoopenSUSE Django allows enumeration of user e-mail addresses 5.3 Medium -
python-DjangoopenSUSE Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters 7.5 High -
python-DjangoopenSUSE Django SQL injection vulnerability 7.3 High -
python-DjangoopenSUSE Django vulnerable to denial-of-service attack 7.5 High -
python-DjangoopenSUSE Django vulnerable to a denial-of-service attack 7.5 High - Show olderLoading…