CVE-2013-5497

The authentication manager process in the web framework in Cisco Intrusion Prevention System IPS does not properly handle user tokens, which allows remote attackers to cause a denial of service intermittent MainApp hang via a crafted management-interface connection request, aka Bug ID CSCuf20148...

Authentication flaw

The authentication manager process in the web framework in Cisco Intrusion Prevention System IPS does not properly handle user tokens, which allows remote attackers to cause a denial of service intermittent MainApp hang via a crafted management-interface connection request, aka Bug ID CSCuf20148...

Cisco Prime Central for Hosted Collaboration Solution Assurance Unauthenticated Username and Password Enumeration Vulnerability

A vulnerability in the web framework of Cisco Prime Central for Hosted Collaboration Solution HCS Assurance could allow an unauthenticated, remote attacker to access sensitive information on the system. The vulnerability is due to improper user authentication and inadequate session management. An...

Debian Security Advisory DSA 2529-1 (python-django - several vulnerabilities)

Jeroen Dekkers and others reported several vulnerabilities in Django, a Python Web framework. The Common Vulnerabilities and Exposures project defines the following issues: CVE-2012-3442Two functions do not validate the scheme of a redirect target, which might allow remote attackers to conduct...

Patches for Django Framework Fix DoS Vuln

Developers behind the Web framework Django have pushed out a new build that fixes a handful of security issues, including a denial of service vulnerability in the framework’s password hasher. Django 1.4.8, Django 1.5.4, and Django 1.6 beta 4 were released over the weekend and users are urged to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681...

CVE-2013-5495

Cisco Unified MeetingPlace Application Server Web Framework contains a cross-site scripting (XSS) vulnerability (CVE-2013-5495) that lets remote attackers inject arbitrary script/HTML via an unspecified parameter. Affects the web framework component of the Application Server; root cause is insuff...

CVE-2013-5495

Cross-site scripting XSS vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681...

CVE-2013-5494

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674...

CVE-2013-5471

Cisco GSS (Global Site Selector) web framework is affected by a Cross-site request forgery (CSRF) vulnerability (CVE-2013-5471). The issue allows an unauthenticated, remote attacker to hijack the authentication of a user by enticing them to follow a crafted link, enabling the attacker to submit a...

Cisco Global Site Selector Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework of Cisco GSS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

[SECURITY] Fedora 19 Update: python-django14-1.4.6-1.fc19

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 19 Update: python-django-1.5.2-1.fc19

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Fedora Update for python-django FEDORA-2013-14797

Check for the Version of python-django OpenVAS Vulnerability Test Fedora Update for python-django FEDORA-2013-14797 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Apache Struts 2 ExceptionDelegator Arbitrary Remote Command Execution

The remote web application appears to use Struts 2, a web framework that utilizes OGNL Object-Graph Navigation Language as an expression language. Due to an error in the way that the ExceptionDelegator component handles mismatched data types, an unauthenticated, remote attacker can execute...

Design/Logic Flaw

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

CVE-2013-3444

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

Multiple Vulnerabilities in Cisco Email Security Appliance (cisco-sa-20130626-esa)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

Multiple Vulnerabilities in Cisco Web Security Appliance (cisco-sa-20130626-wsa)

According to its self-reported version, the version of Cisco Web Security Appliance running on the remote host has the following vulnerabilities : - Multiple unspecified vulnerabilities exist in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...