Lucene search
+L

167 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/07 12:00 a.m.•10 views

CVE-2015-1555: Improper Input Validation

Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators...

9.1CVSS5.8AI score0.01393EPSS
SaveExploits0References2
PyPA
PyPA
•added 2015/08/24 2:59 p.m.•13 views

PYSEC-2015-23

The 1 contrib.sessions.backends.base.SessionBase.flush and 2 cachedb.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service session stor...

5CVSS6.9AI score0.04969EPSS
SaveExploits0References11Affected Software1
Cvelist
Cvelist
•added 2015/08/24 2:00 p.m.•45 views

CVE-2015-5964

The 1 contrib.sessions.backends.base.SessionBase.flush and 2 cachedb.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service session stor...

6.4AI score0.04969EPSS
SaveExploits0References10
osv_dsa
osv_dsa
•added 2015/08/18 12:00 a.m.•15 views

DSA-3338-1 python-django - security update

Bulletin has no description...

5CVSS6.1AI score0.05206EPSS
SaveExploits0
Mageia
Mageia
•added 2015/07/28 9:01 p.m.•58 views

Updated python-django and python-django14 packages fix security vulnerabilities

Eric Peterson and Lin Hua Cheng discovered that a new empty record used to be created in the session storage every time a session was accessed and an unknown session key was provided in the request cookie. This could allow remote attackers to saturate the session store or cause other users' sessi...

7.8CVSS6.5AI score0.07266EPSS
SaveExploits0References3
Exploit DB
Exploit DB
•added 2012/10/16 12:00 a.m.•33 views

Microsoft Windows - Escalate Service Permissions Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/windows/services' require 'rex'...

5.3AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/03/13 12:00 a.m.•52 views

[SECURITYREASON.COM][phpBB 2.0.13 SQL error in session cXIb8O3.8]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpBB 2.0.13 SQL error in session cXIb8O3.8 Author: Maksymilian Arciemowicz cXIb8O3 Date: 10.3.2005 from securityreason.com TEAM - --- 0.Description --- phpBB is a high powered, fully scalable, and highly customizable Open Source bulletin board packag...

0.1AI score
SaveExploits0
Rows per page
Query Builder