Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-3847

Malware in sbrugna...

5CVSS9.2AI score0.01117EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-4689

Malware in sbrugna...

9.3CVSS6.4AI score0.04956EPSS
Exploits0References8
OSV
OSV
added 2022/05/02 3:37 a.m.8 views

GHSA-9XG7-GG9M-RMQ9 Django Admin Media Handler Vulnerable to Directory Traversal

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

8.7CVSS6.1AI score0.01377EPSS
Exploits0References12
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/02 12:0 a.m.17 views

Django Admin Media Handler Vulnerable to Directory Traversal

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

5CVSS6.2AI score0.01377EPSS
Exploits0References9Affected Software1
ThreatPost
ThreatPost
added 2012/12/03 7:14 p.m.30 views

Two High-Risk Flaws Fixed in Google Chrome 23

Google has fixed two bugs in its Chrome browser, including a high-severity vulnerability in its media handler that a researcher named Pinkie Pie discovered. The bug, which is different from another use-after-free vulnerability the researcher used in the Pwnium contest at Hack in the Box in Octobe...

10CVSS1.4AI score0.04004EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2009/10/19 12:0 a.m.24 views

Mandrake Security Advisory MDVSA-2009:275 (python-django)

The remote host is missing an update to python-django announced via advisory MDVSA-2009:275. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

5CVSS6.4AI score0.01377EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2009/08/11 12:0 a.m.22 views

Django Directory Traversal Vulnerability (Linux)

This host has Django installed and is prone to Directory Traversal Vulnerability. OpenVAS Vulnerability Test $Id: gbdjangodirtraversalvulnlin.nasl 5904 2017-04-10 06:18:08Z teissa $ Django Directory Traversal Vulnerability Linux Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks...

5CVSS6.3AI score0.01377EPSS
Exploits0References3
OSV
OSV
added 2009/08/04 4:30 p.m.21 views

PYSEC-2009-3

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

5CVSS5.3AI score0.01377EPSS
Exploits0References9
NVD
NVD
added 2009/08/04 4:30 p.m.14 views

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

5CVSS6.4AI score0.01377EPSS
Exploits0References9
Prion
Prion
added 2009/08/04 4:30 p.m.13 views

Directory traversal

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

5CVSS6.9AI score0.01377EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2009/08/04 4:30 p.m.1 views

DEBIAN-CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

5CVSS6.5AI score0.01377EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2009/08/04 4:13 p.m.19 views

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

5CVSS6.2AI score0.01377EPSS
Exploits0
CVE
CVE
added 2009/08/04 4:13 p.m.76 views

CVE-2009-2659

CVE-2009-2659 affects the Django Admin media handler in core/servers/basehttp.py for Django 1.0 and 0.96. The vulnerability arises from improper mapping of URL requests to static media files, enabling directory traversal and reading arbitrary files via a crafted URL. Descriptions in connected rec...

5CVSS6.4AI score0.01377EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2009/08/04 4:13 p.m.22 views

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

6.3AI score0.01377EPSS
Exploits0References9
Prion
Prion
added 2007/12/15 1:46 a.m.18 views

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie...

9.3CVSS7.7AI score0.04956EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2007/12/15 1:46 a.m.21 views

CVE-2007-4707

Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie...

9.3CVSS7.5AI score0.04956EPSS
Exploits0References7
CVE
CVE
added 2007/12/15 1:0 a.m.61 views

CVE-2007-4707

CVE-2007-4707 concerns Apple QuickTime before 7.3.1, where the Flash media handler contains multiple vulnerabilities that can be exploited by a crafted QuickTime movie to remotely execute arbitrary code. Affected product: QuickTime (Windows and Mac OS X) prior to 7.3.1; vulnerability class is des...

9.3CVSS7.5AI score0.04956EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2007/12/15 1:0 a.m.21 views

CVE-2007-4707

Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie...

7.5AI score0.04956EPSS
Exploits0References7
Rows per page
Query Builder