16 May 2014

4 results · Clear filters · Feed

• High 7.4
  CVE-2014-1418

  Django Vulnerable to Cache Poisoning

  Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a…

  python-django django python-django Debian Ubuntu PyPI
  May 16, 2014
• High 7.5
  CVE-2014-3730

  Django Allows Open Redirects

  The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrate…

  python-django django python-django Debian Ubuntu PyPI
  May 16, 2014
• High —
  CVE-2014-3742

  File Descriptor Leak Can Cause DoS Vulnerability in hapi

  The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.

  hapi npm
  May 16, 2014
• High 8.3
  CVE-2014-0782 Public exploit EPSS 57%

  Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

  Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and ea…

  Yokogawa CENTUM CS 3000 ICS / OT
  May 16, 2014