CVE-2011-0698

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

CVE-2011-0696

Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged AJAX requests that leverage a "combination of browser plugins...

[SECURITY] [DSA 2163-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2163-1 [email protected] http://www.debian.org/security/ Nico Golde February 14, 2011 http://www.debian.org/security/faq -...

CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

CVE-2011-0696

Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged AJAX requests that leverage a "combination of browser plugins...

DSA-2163-1 python-django - multiple

Bulletin has no description...

FreeBSD : django -- multiple vulnerabilities (bd760627-3493-11e0-8103-00215c6a37bb)

Django project reports : Today the Django team is issuing multiple releases -- Django 1.2.5 and Django 1.1.4 -- to remedy three security issues reported to us. All users of affected versions of Django are urged to upgrade immediately. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

django -- multiple vulnerabilities

Django project reports: Today the Django team is issuing multiple releases -- Django 1.2.5 and Django 1.1.4 -- to remedy three security issues reported to us. All users of affected versions of Django are urged to upgrade immediately...

django -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for Django FEDORA-2011-0096

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2011-0096 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for Django FEDORA-2011-0096

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : Django-1.2.4-1.fc13 (2011-0096)

Mon Jan 3 2011 Steve 'Ashcrow' Milner - 1.2.4-1 - Update for multiple security issues see http://www.djangoproject.com/weblog/2010/dec/22/securi ty/ - Sat Oct 9 2010 Steve 'Ashcrow' Milner - 1.2.3-3 - Now build docs for F12+ - Added Django-remove-djangodocs-ext.patch - Sat Oct 9 2010 Steve...

Fedora Update for Django FEDORA-2011-0120

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2011-0120 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 14 : Django-1.2.4-1.fc14 (2011-0120)

Mon Jan 3 2011 Steve 'Ashcrow' Milner - 1.2.4-1 - Update for multiple security issues see http://www.djangoproject.com/weblog/2010/dec/22/securi ty/ - Sat Oct 9 2010 Steve 'Ashcrow' Milner - 1.2.3-3 - Now build docs for F12+ - Added Django-remove-djangodocs-ext.patch - Sat Oct 9 2010 Steve...

Fedora Update for Django FEDORA-2011-0120

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 13 Update: Django-1.2.4-1.fc13

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Ubuntu Update for python-django vulnerabilities USN-1040-1

Ubuntu Update for Linux kernel vulnerabilities USN-1040-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10401.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for python-django vulnerabilities USN-1040-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PYSEC-2011-28

The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obtain sensitive information via a series...

PYSEC-2011-29

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...