Поиск уязвимостей
Количество 8
Количество 8
GHSA-3f2c-jm6v-cr35
Django DNS Rebinding Vulnerability
CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x bef ...
ALT-PU-2017-1227
ALT-PU-2017-1227: package `python-module-django` update to version 1.8.17-alt1
openSUSE-SU-2018:0826-1
Security update for python-Django
openSUSE-SU-2018:0824-1
Security update for python3-Django
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
GHSA-3f2c-jm6v-cr35 Django DNS Rebinding Vulnerability | CVSS3: 8.1 | 6% Низкий | больше 4 лет назад | |
CVE-2016-9014 Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS. | CVSS3: 8.1 | 6% Низкий | почти 10 лет назад | |
CVE-2016-9014 Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS. | CVSS3: 7.4 | 6% Низкий | около 10 лет назад | |
CVE-2016-9014 Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS. | CVSS3: 8.1 | 6% Низкий | почти 10 лет назад | |
CVE-2016-9014 Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x bef ... | CVSS3: 8.1 | 6% Низкий | почти 10 лет назад | |
ALT-PU-2017-1227 ALT-PU-2017-1227: package `python-module-django` update to version 1.8.17-alt1 | CVSS3: 9.8 | больше 9 лет назад | ||
openSUSE-SU-2018:0826-1 Security update for python-Django | больше 8 лет назад | |||
openSUSE-SU-2018:0824-1 Security update for python3-Django | больше 8 лет назад |
Уязвимостей на страницу