Search for packages
| purl | pkg:ebuild/dev-python/django@1.6.7 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-42cm-j2av-87ea | The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated. |
CVE-2014-0480
GHSA-f7cm-ccfp-3q4r PYSEC-2014-4 |
| VCID-c1n5-4ars-u7ff | The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name. |
CVE-2014-0481
GHSA-296w-6qhq-gf92 PYSEC-2014-5 |
| VCID-eker-m822-cuax | The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI. |
CVE-2014-0483
GHSA-rw75-m7gp-92m3 PYSEC-2014-7 |
| VCID-jc9f-vgy8-ruan | The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header. |
CVE-2014-0482
GHSA-625g-gx8c-xcmg PYSEC-2014-6 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T12:58:31.784690+00:00 | Gentoo Importer | Fixing | VCID-eker-m822-cuax | https://security.gentoo.org/glsa/201412-22 | 38.0.0 |
| 2026-04-01T12:58:31.775600+00:00 | Gentoo Importer | Fixing | VCID-jc9f-vgy8-ruan | https://security.gentoo.org/glsa/201412-22 | 38.0.0 |
| 2026-04-01T12:58:31.764881+00:00 | Gentoo Importer | Fixing | VCID-c1n5-4ars-u7ff | https://security.gentoo.org/glsa/201412-22 | 38.0.0 |
| 2026-04-01T12:58:31.755597+00:00 | Gentoo Importer | Fixing | VCID-42cm-j2av-87ea | https://security.gentoo.org/glsa/201412-22 | 38.0.0 |