Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 107

Export CSV
CVE-2022-28347

Django: SQL injection via QuerySet.explain(options) on PostgreSQL

A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.

CVSS 3.1 · 9.8 Critical EPSS 2.9% KEV · Not listed
Vendors
Debian Djangoproject Redhat
Products
Debian Linux Django Ansible Automation Platform and 3 more
CVE-2022-28346

Django: SQL injection in QuerySet.annotate(),aggregate() and extra()

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

CVSS 3.1 · 9.8 Critical EPSS 18.7% KEV · Not listed
Vendors
Debian Djangoproject Redhat
Products
Debian Linux Django Ansible Automation Platform and 4 more
CVE-2024-26130

cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Cryptography.io Redhat
Products
Cryptography Ansible Automation Platform Rhui and 2 more
CVE-2023-31047

python-django: Potential bypass of validation when uploading multiple files using one form field

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Djangoproject Fedoraproject Redhat
Products
Django Fedora Rhui and 2 more
CVE-2023-37276

aiohttp vulnerable to HTTP request smuggling

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6. Vulnerable code is used by aiohttp for its HTTP request parser when available which is the default case when installing from a wheel. This vulnerability only affects users of aiohttp as an HTTP server (ie `aiohttp.Application`), you are not affected by this vulnerability if you are using aiohttp as an HTTP client library (ie `aiohttp.ClientSession`). Sending a crafted HTTP request will cause the server to misinterpret one of the HTTP header values leading to HTTP request smuggling. This issue has been addressed in version 3.8.5. Users are advised to upgrade. Users unable to upgrade can reinstall aiohttp using `AIOHTTP_NO_EXTENSIONS=1` as an environment variable to disable the llhttp HTTP request parser implementation. The pure Python implementation isn't vulnerable.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Aio-libs Project Aiohttp Redhat
Products
Aiohttp Aiohttp Rhui and 2 more
CVE-2021-44420

django: potential bypass of an upstream access control based on URL paths

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

CVSS 3.1 · 7.3 High EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 2 more
Products
Ubuntu Linux Debian Linux Django and 4 more
CVE-2018-10917

pulp: Improper path parsing leads to overwriting of iso repositories

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.

CVSS 3.0 · 6.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Pulpproject Redhat
Products
Pulp Rhui Satellite and 1 more