Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2011-0010

Malware in sbrugna...

6.8CVSS5.8AI score0.01093EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2022/01/18 12:00 a.m.•7 views

PT-2022-9944

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Automation versions 21.0.1 through 21.0.2 Description The issue is caused by improper validation of input by the HOST headers, allowing a remote attacker to inject HTTP HOST headers by sending a specially crafted HTTP request...

5.4CVSS0.00771EPSS
SaveExploits0References4
OSV
OSV
•added 2011/10/19 10:55 a.m.•18 views

CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

6.6AI score
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2011/10/19 10:55 a.m.•32 views

CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

6.8CVSS5.9AI score0.01093EPSS
SaveExploits0References2
Prion
Prion
•added 2011/10/19 10:55 a.m.•38 views

Cross site request forgery (csrf)

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

6.8CVSS7.2AI score0.01093EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2011/10/19 10:00 a.m.•82 views

CVE-2011-4140

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

6.8CVSS6.6AI score0.01093EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/03/26 12:00 a.m.•38 views

Ziproxy Security Bypass Vulnerability

Ziproxy server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS6.4AI score0.02376EPSS
SaveExploits0References3
Rows per page
Query Builder