Lucene search
K

7661 matches found

CNVD
CNVD
added 2016/10/13 12:0 a.m.2 views

Android NVIDIA Analytics Tool Sensitive Information Disclosure Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Android's NVIDIA Analytics tool allows remote attackers to exploit the vulnerability to build malicious applications that can access sensitive information...

5.5CVSS6.8AI score0.00392EPSS
Exploits0References1
CNVD
CNVD
added 2016/10/13 12:0 a.m.3 views

Android NVIDIA Analysis Tool Sensitive Information Disclosure Vulnerability (CNVD-2016-09565)

Android is an open source operating system based on Linux. A security vulnerability in Android's NVIDIA Analytics tool allows remote attackers to exploit the vulnerability to build malicious applications that can access sensitive information...

5.5CVSS6.8AI score0.00392EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2016/10/10 6:10 a.m.6 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/10/10 6:10 a.m.28 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.5CVSS6.7AI score0.0613EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2016/10/10 6:10 a.m.5 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/10/10 6:10 a.m.40 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.5CVSS6.7AI score0.0613EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.3 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.89 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS6.7AI score0.0613EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.4 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.41 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS6.7AI score0.0613EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.8 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.39 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.7AI score0.0613EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.2 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.0613EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2016/10/10 5:56 a.m.35 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.7AI score0.0613EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2016/10/10 12:0 a.m.15 views

WSO2 Carbon Products Detection (HTTP)

HTTP based detection of WSO2 Carbon products. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7AI score
Exploits0References1
myhack58
myhack58
added 2016/10/09 12:0 a.m.24 views

Django CSRF Bypass vulnerability analysis(CVE-2 0 1 6-7 4 0 1)-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-28 0x00 vulnerability overview 1. Vulnerability description Django is a Python written open source Web application framework. Two years ago researchers at hackerone on the submission of a use of Google Analytics to bypass Django's CSRF...

0.2AI score
Exploits0
Debian
Debian
added 2016/10/06 9:23 p.m.25 views

[SECURITY] [DLA DLA-649-1] python-django security update

Package : python-django Version : 1.4.22-1+deb7u1 CVE ID : CVE-2016-7401 It was discovered that there was a possible CSRF protection bypass on sites that use Google Analytics in python-django, a High-level Python web development framework. More information can be found in the upstream announcemen...

7.5CVSS5.3AI score0.0613EPSS
Exploits1
OSV
OSV
added 2016/10/06 12:0 a.m.12 views

DLA-649-1 python-django - security update

Bulletin has no description...

7.5CVSS7.5AI score0.0613EPSS
Exploits1
myhack58
myhack58
added 2016/10/05 12:0 a.m.35 views

Django CSRF Bypass (CVE-2 0 1 6-7 4 0 1) vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-28 0x00 vulnerability overview 1. Vulnerability description Djangois a Python written open source Web application framework. Two years ago researchers at hackerone on the submission of a use of Google Analytics to bypass Django's CSRF...

Exploits0
OSV
OSV
added 2016/10/04 12:20 p.m.4 views

MGASA-2016-0334 Updated python-django packages fix security vulnerability

CVE-2016-7401: CSRF protection bypass on a site with Google Analytics An interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection...

7.5CVSS7.5AI score0.0613EPSS
Exploits1References3
Rows per page
Query Builder