88 matches found
CVE-2010-1443
The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...
CVE-2010-1443
CVE-2010-1443 affects VideoLAN VLC media player prior to 1.0.6, specifically the XSPF playlist parser’s parse_track_node function in modules/demux/playlist/xspf.c. The issue allows unauthenticated remote attackers to trigger a denial of service via an empty location element in an XML Shareable Pl...
CVE-2010-1443
The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...
Fedora Update for python-django14 FEDORA-2014-15307
Check the version of python-django14 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868527";...
Fedora Update for python-django FEDORA-2014-9791
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python-django FEDORA-2014-5562
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-1443
CVE-2014-1443 affects Core FTP Server 1.2 before build 515. Remote authenticated users can disclose the password of the previously logged-on user by sending a specially crafted USER command (length-specifically crafted string), likely due to an out-of-bounds/read-path issue. The impact is informa...
Core FTP Server < 1.2 Build 515 Multiple Vulnerabilities
The version of Core FTP running on the remote host is prior to 1.2 build 515. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists that is triggered when handling malformed data after the 'AUTH SSL' command. An unauthenticated, remote attacker can...
Fedora Update for python-django FEDORA-2013-16901
Check for the Version of python-django OpenVAS Vulnerability Test Fedora Update for python-django FEDORA-2013-16901 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for python-django FEDORA-2013-16901
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python-django14 FEDORA-2013-16899
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : python-django-1.5.4-1.fc20 (2013-16938)
Fixes CVE-2013-1443 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 19 : python-django-1.5.4-1.fc19 (2013-16901)
fix CVE-2013-1443 Fix CVE-2013-413 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora 20 : python-django14-1.4.8-1.fc20 (2013-16840)
fix CVE-2013-1443 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...
Fedora 19 : python-django14-1.4.8-1.fc19 (2013-16899)
fix CVE-2013-1443 DoS via large passwords Fix for CVE-2013-4315 SSI include issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2013-1443
CVE-2013-1443 affects Django’s authentication framework (django.contrib.auth) across Django 1.4.x < 1.4.8, 1.5.x < 1.5.4, and 1.6.x
Updated python-django package fixes multiple vulnerabilities
Updated python-django package fixes security vulnerabilities: Rainer Koirikivi discovered a directory traversal vulnerability with 'ssi' template tags in python-django, a high-level Python web development framework. It was shown that the handling of the 'ALLOWEDINCLUDEROOTS' setting, used to...
Django密码哈希拒绝服务漏洞(CVE-2013-1443)
BUGTRAQ ID: 62409 CVE ID: CVE-2013-1443 Django是Python编程语言驱动的一个开源Web应用程序框架 Django 1.4.8 and 1.5.4之前版本在计算已提交密码的哈希时,django.contrib.auth中存在错误,通过发送较大的密码,攻击者可利用此漏洞造成受影响系统崩溃,导致拒绝服务 0 Django = 1.5.4 Django = 1.4.8 厂商补丁: Django ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.djangoproject.com/...
[SECURITY] [DSA 2758-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2758-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 17, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2758-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2758-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 17, 2013 http://www.debian.org/security/faq -...