8007 matches found
[SECURITY] Fedora 17 Update: Django-1.4.2-1.fc17
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
Fedora 17 : Django-1.4.2-1.fc17 (2012-16440)
Security releases issued - Host header poisoning Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] Fedora 16 Update: Django-1.3.4-1.fc16
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
CVE-2012-4520
The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...
Fedora 16 : Django-1.3.4-1.fc16 (2012-16417)
Security releases issued - Host header poisoning Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
FreeBSD Ports: django
The remote host is missing an update to the system as announced in the referenced advisory. VID 5f326d75-1db9-11e2-bc8f-d0df9acfd7e5 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5f326d75-1db9-11e2-bc8f-d0df9acfd7e5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: django
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : django -- multiple vulnerabilities (5f326d75-1db9-11e2-bc8f-d0df9acfd7e5)
The Django Project reports : - Host header poisoning Some parts of Django -- independent of end-user-written applications -- make use of full URLs, including domain name, which are generated from the HTTP Host header. Some attacks against this are beyond Django's ability to control, and require t...
Fedora Update for python-django-horizon FEDORA-2012-16148
Check for the Version of python-django-horizon OpenVAS Vulnerability Test Fedora Update for python-django-horizon FEDORA-2012-16148 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Fedora Update for python-django-horizon FEDORA-2012-16148
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 17 Update: python-django-horizon-2012.1.3-1.fc17
Horizon is a Django application for providing Openstack UI components. It allows performing site administrator viewing account resource usage, configuring users, accounts, quotas, flavors, etc. and end user operations start/stop/delete instances, create/restore snapshots, view instance VNC consol...
Fedora 18 : python-django-1.4.2-1.fc18 (2012-16406)
Security releases issued - Host header poisoning Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 17 : python-django-horizon-2012.1.3-1.fc17 (2012-16148)
Latest bugfix update for the essex branch CVE-2012-3540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] Fedora 18 Update: python-django-1.4.2-1.fc18
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
Django 1.3.1 'HttpRequest.get_host()'信息泄露漏洞
Bugtraq ID:56146 CVE ID:CVE-2012-4520 Django是一款开放源代码的Web应用框架,由Python写成。 当处理HTTP "Host"头数据时"HttpRequest.gethost"方法存在漏洞,可被利用构建特制的头字段泄露任意URLS。 0 Django 1.3.1 厂商解决方案 Django 1.3.4或1.4.2已经修复此漏洞,建议用户下载使用: https://www.djangoproject.com/weblog/2012/oct/17/security/...
django -- multiple vulnerabilities
The Django Project reports: Host header poisoning Some parts of Django -- independent of end-user-written applications -- make use of full URLs, including domain name, which are generated from the HTTP Host header. Some attacks against this are beyond Django's ability to control, and require the...
Ubuntu Update for python-django USN-1560-1
Ubuntu Update for Linux kernel vulnerabilities USN-1560-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15601.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python-django USN-1560-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.ne...
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : python-django vulnerabilities (USN-1560-1)
It was discovered that Django incorrectly validated the scheme of a redirect target. If a user were tricked into opening a specially crafted URL, an attacker could possibly exploit this to conduct cross-site scripting XSS attacks. CVE-2012-3442 It was discovered that Django incorrectly handled...
Ubuntu: Security Advisory (USN-1560-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1560-1: Django vulnerabilities
It was discovered that Django incorrectly validated the scheme of a redirect target. If a user were tricked into opening a specially crafted URL, an attacker could possibly exploit this to conduct cross-site scripting XSS attacks. CVE-2012-3442 It was discovered that Django incorrectly handled...