Lucene search
K

11 matches found

OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.17 views

Fedora Update for python-tornado FEDORA-2012-8194

Check for the Version of python-tornado OpenVAS Vulnerability Test Fedora Update for python-tornado FEDORA-2012-8194 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

5CVSS6.4AI score0.01362EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.13 views

Fedora Update for python-tornado FEDORA-2012-8194

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.01362EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2012/06/04 12:0 a.m.49 views

Tornado < 2.2.1 HTTP Response Splitting

According to its banner, the version of Tornado installed on the remote host is older than 2.2.1. As such, it may be affected by an HTTP response splitting vulnerability that may allow an unauthenticated, remote attacker to forge responses from a trusted server. C Tenable Network Security, Inc...

5CVSS5.5AI score0.01362EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2012/06/01 12:0 a.m.11 views

Fedora Update for python-tornado FEDORA-2012-8205

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.01362EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2012/05/30 12:0 a.m.14 views

Fedora 16 : python-tornado-2.2.1-1.fc16 (2012-8217)

Update to 2.2.1 which fixes an HTTP header injection vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

5CVSS5.4AI score0.01362EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2012/05/30 12:0 a.m.17 views

Fedora 15 : python-tornado-2.2.1-1.fc15 (2012-8205)

Update to 2.2.1 which fixes an HTTP header injection vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

5CVSS5.4AI score0.01362EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2012/05/30 12:0 a.m.18 views

Fedora 17 : python-tornado-2.2.1-1.fc17 (2012-8194)

Update to 2.2.1 which fixes an HTTP header injection vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

5CVSS5.4AI score0.01362EPSS
Exploits0References3
OSV
OSV
added 2012/05/23 8:55 p.m.2 views

CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

6.7AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2012/05/23 8:55 p.m.14 views

CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

5CVSS5.9AI score0.01362EPSS
Exploits0References3
Cvelist
Cvelist
added 2012/05/23 8:0 p.m.29 views

CVE-2012-2374

CRLF injection vulnerability in the tornado.web.RequestHandler.setheader function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input...

6.6AI score0.01362EPSS
Exploits0References5
CVE
CVE
added 2012/05/23 8:0 p.m.60 views

CVE-2012-2374

CVE-2012-2374 is a Tornado CRLF injection vulnerability in the function tornado.web.RequestHandler.set_header, where input crafted by an attacker can inject arbitrary HTTP headers and enable HTTP response splitting. The issue affects Tornado versions prior to 2.2.1. The vulnerability enables an a...

5CVSS6.8AI score0.01362EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder