Lucene search
+L

7722 matches found

OSV
OSV
added 2012/11/18 11:55 p.m.12 views

CVE-2012-4520

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.6AI score
SaveExploits0References18
OSV
OSV
added 2012/11/18 11:55 p.m.4 views

DEBIAN-CVE-2012-4520

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.4CVSS7.3AI score0.03665EPSS
SaveExploits1References1
OSV
OSV
added 2012/11/18 11:55 p.m.31 views

PYSEC-2012-7

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.4CVSS5.9AI score0.03665EPSS
SaveExploits1References18
PyPA
PyPA
added 2012/11/18 11:55 p.m.12 views

PYSEC-2012-7

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.4CVSS7.3AI score0.03665EPSS
SaveExploits1References18Affected Software1
Debian CVE
Debian CVE
added 2012/11/18 11:00 p.m.56 views

CVE-2012-4520

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.4CVSS6.6AI score0.03665EPSS
SaveExploits1
Cvelist
Cvelist
added 2012/11/18 11:00 p.m.46 views

CVE-2012-4520

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.5AI score0.03665EPSS
SaveExploits1References17
CVE
CVE
added 2012/11/18 11:00 p.m.113 views

CVE-2012-4520

CVE-2012-4520 concerns Django’s http.HttpRequest.get_host, where Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 can be exploited by crafting the Host header to cause the application to display arbitrary URLs, potentially impacting views such as password resets. The vulnerability is described ac...

6.4CVSS6.6AI score0.03665EPSS
SaveExploits1References17Affected Software1
securityvulns
securityvulns
added 2012/11/18 12:00 a.m.97 views

[USN-1632-1] Django vulnerability

========================================================================== Ubuntu Security Notice USN-1632-1 November 15, 2012 python-django vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

6.4CVSS0.4AI score0.03665EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2012/11/16 12:00 a.m.25 views

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : python-django vulnerability (USN-1632-1)

James Kettle discovered Django did not properly filter the Host HTTP header when processing certain requests. An attacker could exploit this to generate and display arbitrary URLs to users. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

6.4CVSS5.6AI score0.03665EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2012/11/15 11:28 p.m.69 views

USN-1632-1: Django vulnerability

James Kettle discovered Django did not properly filter the Host HTTP header when processing certain requests. An attacker could exploit this to generate and display arbitrary URLs to users...

6.4CVSS5.5AI score0.03665EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2012/11/02 12:00 a.m.28 views

Fedora Update for Django FEDORA-2012-16440

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2012-16440 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

6.4CVSS6.5AI score0.03665EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2012/11/02 12:00 a.m.31 views

Fedora Update for Django FEDORA-2012-16417

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2012-16417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

6.4CVSS6.5AI score0.03665EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2012/11/02 12:00 a.m.26 views

Fedora Update for Django FEDORA-2012-16440

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.6AI score0.02663EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2012/11/02 12:00 a.m.23 views

Fedora Update for Django FEDORA-2012-16417

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.6AI score
SaveExploits0References2
Fedora
Fedora
added 2012/10/31 2:58 a.m.45 views

[SECURITY] Fedora 17 Update: Django-1.4.2-1.fc17

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

6.4CVSS1.6AI score0.03665EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2012/10/31 12:00 a.m.31 views

Fedora 17 : Django-1.4.2-1.fc17 (2012-16440)

Security releases issued - Host header poisoning Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

6.4CVSS5.3AI score0.03665EPSS
SaveExploits1References3
Fedora
Fedora
added 2012/10/30 3:45 a.m.35 views

[SECURITY] Fedora 16 Update: Django-1.3.4-1.fc16

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

6.4CVSS1.6AI score0.03665EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2012/10/30 12:00 a.m.37 views

Fedora 16 : Django-1.3.4-1.fc16 (2012-16417)

Security releases issued - Host header poisoning Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

6.4CVSS5.3AI score0.03665EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2012/10/30 12:00 a.m.36 views

CVE-2012-4520

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

6.4CVSS5.9AI score0.03665EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2012/10/29 12:00 a.m.39 views

FreeBSD Ports: django

The remote host is missing an update to the system as announced in the referenced advisory. VID 5f326d75-1db9-11e2-bc8f-d0df9acfd7e5 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5f326d75-1db9-11e2-bc8f-d0df9acfd7e5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

6.4CVSS6.3AI score0.03665EPSS
SaveExploits1
Rows per page
Query Builder