CVE-2013-6044

The issafeurl function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting XSS or other vulnerabilities into Django applications that use this function, a...

PT-2013-5937

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.5 Django versions 1.5.x through 1.5.1 Django versions 1.6 before beta 2 Description The issue in the is safe url function in utils/http.py might introduce cross-site scripting XSS or other issues into...

CVE-2013-6044: Improper Neutralization of Input During Web Page Generation

The issafeurl function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting XSS or other vulnerabilities into Django applications that use this function, a...

PT-2013-3571

Name of the Vulnerable Software and Affected Versions OpenStack Swift versions Folsom through Havana Description The issue allows attackers to trigger invalid or spoofed responses via an account name, potentially exploiting an XML injection vulnerability in the account/utils.py file...

Oracle Linux 6 : Core X11 clients (ELSA-2013-0502)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0502 advisory. - x11perf 1.5.4 CVE-2011-2504 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 3 : shadow-utils (ELSA-2007-0431)

From Red Hat Security Advisory 2007:0431 : An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for...

Oracle Linux 5 / 6 : scsi-target-utils (ELSA-2011-0332)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0332 advisory. 1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 5 : bluez-libs / and / bluez-utils (ELSA-2008-0581)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0581 advisory. - Fix CVE-2008-2374 Resolves: 452880 bluez-utils: Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 : nfs-utils (ELSA-2012-0310)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0310 advisory. - Mount fails to anticipate RLIMITFSIZE bz 697979,CVE-2011-1749 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : samba / and / cifs-utils (ELSA-2011-1221)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1221 advisory. - Security Release, fixes CVE-2011-2694, CVE-2011-2522 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 / 6 : ecryptfs-utils (ELSA-2011-1241)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1241 advisory. - privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833...

Oracle Linux 5 / 6 : xorg-x11-server-utils (ELSA-2011-0433)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0433 advisory. 7.4-15.el60.1 - cve-2011-0465: Sanitize cpp macro expansion. CVE 2011-0465 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 : nfs-utils (ELSA-2008-0486)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0486 advisory. 1.0.9-35z - Added the warning.patch to fix some warning which were flaged by rpmdiff during the errata phasea Errata 2008:0486 1.0.9-34z - Re-enabled tcp...

Oracle Linux 4 : shadow-utils (ELSA-2007-0276)

From Red Hat Security Advisory 2007:0276 : Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for...

Oracle Linux 5 : scsi-target-utils (ELSA-2010-0362)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0362 advisory. 0.0-6.20091205snap.2 - 576359 Fix format string vulnerability CVE-2010-0743 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : cifs-utils (ELSA-2012-0902)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0902 advisory. 4.8.1-10 - mount.cifs: don't allow unprivileged users to mount onto dirs they can't chdir into bz 812782 4.8.1-9 - cifs.upcall: use krb5snametoprincipal to...

Oracle Linux 5 : gnutls (ELSA-2010-0166)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0166 advisory. - implement safe renegotiation - CVE-2009-3555 533125 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 : scsi-target-utils (ELSA-2010-0518)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0518 advisory. 0.0-6.20091205snap.3 - Fix buffer overflow in isns scn handling CVE-2010-2221 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 5 : Important: / nfs-utils-lib (ELSA-2007-0951)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0951 advisory. 1.0.8-7.2.z2 - Updated libnfsidmap to -17 to fix a security issue bz 254041 1.0.8-7.2.z1 - Fixed RPC library buffer overflow bz 265061 Tenable has...

Oracle Linux 4 : nfs-utils-lib (ELSA-2007-0913)

From Red Hat Security Advisory 2007:0913 : An updated nfs-utils-lib package to correct a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support...