openSUSE Security Update : python-django (openSUSE-SU-2013:1203-1)

python-django was updated to 1.4.5 to fix various security issues and bugs. Update to 1.4.5 : - Security release. - Fix bnc807175 / bnc787521 / CVE-2012-4520 / CVE-2013-0305 / CVE-2013-0306 and CVE-2013-1665. - Update to 1.4.3 : - Security release : - Host header poisoning - Redirect poisoning -...

Oracle Linux 5 : samba (ELSA-2014-0305)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0305 advisory. - Security Release, fixes CVE-2013-0213 and CVE-2013-4124 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Memory corruption

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0305 and CVE-2014-0311...

Memory corruption

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0299 and CVE-2014-0305...

CVE-2014-0305

CVE-2014-0305 concerns Microsoft Internet Explorer 6–11 and involves memory corruption triggered by a crafted web site, leading to remote code execution or a denial of service. The connected documents confirm similar family vulnerabilities (CVE-2014-0299 and CVE-2014-0311) with the same memory-co...

Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0305)

BUGTRAQ ID: 66030 CVECAN ID: CVE-2014-0305 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS14-012）以及相应补丁: MS14-012：Cumulative Security Update for Internet...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0305)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer CVE-2014-0305 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6...

Oracle Linux 5 / 6 : samba (ELSA-2011-0305)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0305 advisory. - Security Release, fixes CVE-2011-0719 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 : boost (ELSA-2012-0305)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0305 advisory. 1.33.1-15 - Fix bugs in parsing invalid regexps - Resolves: 766755 1.33.1-14 - Delete leftover .orig files after patches are successfully applied...

CVE-2013-0305

The CVE-2013-0305 issue relates to Django’s admin history view: the permissions check for history is missing in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2, allowing remote authenticated administrators to obtain sensitive object history information. Remediati...

Moderate: Red Hat Security Advisory: Django security update

Updated Django packages that fix multiple security issues are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora Update for python-django FEDORA-2013-2843

Check for the Version of python-django OpenVAS Vulnerability Test Fedora Update for python-django FEDORA-2013-2843 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for Django FEDORA-2013-2874

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2013-2874 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for Django FEDORA-2013-2874

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for python-django FEDORA-2013-2843

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : python-django-1.4.5-2.fc18 (2013-2843)

Update to Django-1.4.4, security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Ubuntu Update for python-django USN-1757-1

Check for the Version of python-django OpenVAS Vulnerability Test $Id: gbubuntuUSN17571.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for python-django USN-1757-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : python-django vulnerabilities (USN-1757-1)

James Kettle discovered that Django did not properly filter the Host HTTP header when processing certain requests. An attacker could exploit this to generate and display arbitrary URLs to users. Although this issue had been previously addressed in USN-1632-1, this update adds additional hardening...

Debian Security Advisory DSA 2634-1 (python-django - several vulnerabilities)

Several vulnerabilities have been discovered in Django, a high-level Python web development framework. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2012-4520 James Kettle discovered that Django did not properly filter the HTTP Host header when processing...