82 matches found
Fedora 13 : Django-1.2.5-1.fc13 (2011-1261)
Fix for CVE-2011-0696 and CVE-2011-0697. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Ubuntu Update for python-django vulnerabilities USN-1066-1
Ubuntu Update for Linux kernel vulnerabilities USN-1066-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10661.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for python-django vulnerabilities USN-1066-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CVE-2011-0697
The CVE-2011-0697 entry maps to a Cross‑site Scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5, where an attacker could inject arbitrary script/HTML via the filename associated with a file upload. The issue arises from input handling in file uploads and results in ...
CVE-2011-0697
Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...
CentOS Update for samba CESA-2010:0697 centos4 i386
Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2010:0697 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CVE-2010-0697
The CVE-2010-0697 entry affects Drupal’s iTweak Upload module (6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3). The root cause is an XSS vulnerability where remote authenticated users with create content and upload file permissions can inject arbitrary web script or HTML via the file name of a...
CVE-2007-5757
The CVE-2007-5757 issue concerns IBM DB2 UDB and specifically the db2pd component. A untrusted search path allows a local user to gain root privileges by manipulating the DB2INSTANCE environment variable to point to a malicious library. Affected versions are IBM DB2 UDB 8 before FixPak 16 and 9 b...
CVE-2008-0697
Technical details about CVE-2008-0697 are not publicly available in the provided documents. The records only indicate an unspecified local privilege escalation in IBM DB2 UDB prior to 8.2 Fixpak 16. Monitor for vendor advisories and updated security reports.
CVE-2007-0697
CVE-2007-0697 affects the ACGVannu web application (version 1.3 and earlier). The issue is a logic flaw in index2.php related to a modified id parameter (referenced by templates/modif.html) that allows remote attackers to change a user’s password or profile. The available sources report this as a...
CentOS 3 / 4 : openssh / openssl (CESA-2006:0697)
Updated openssh packages that fix two security flaws are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes t...
CVE-2005-0697
CopperExport XP_Publish.PHP SQL Injection (CVE-2005-0697) affects CopperExport 0.2.1 via the xp_publish.php process_picture function. The vulnerability arises from unsanitized input used in a SQL query, potentially allowing an attacker to inject arbitrary SQL commands via the title, caption, or k...
CVE-2005-0697
SQL injection vulnerability in the processpicture function xppublish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the 1 title, 2 caption, or 3 keywords parameters...
CVE-2004-0697
Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information...
CVE-2004-0697
CVE-2004-0697 affects 4D WebSTAR 5.3.2 and earlier. The vulnerability permits remote attackers to read the php.ini configuration file, potentially exposing sensitive information. The NVD entry lists a base CVSS v2 score of 5.0 (Medium) with network access and low complexity, but no exploitation d...
CVE-2003-0697
Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service crash or gain root privileges...
CVE-2003-0697
Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service crash or gain root privileges...
CVE-2003-0697
CVE-2003-0697 describes a format string vulnerability in the lpd component within the bos.rte.printers fileset on AIX 4.3–5.2, reportedly triggered when debug is enabled. The flaw allows local users to cause a denial of service (crash) and could potentially escalate to root privileges. Affected s...
CVE-2002-0697
Microsoft Metadirectory Services MMS 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials...