Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:44:04 +0000 cnvd-2015-03449 https://cve.radiocsirt.org/vuln/cnvd-2015-03449 cnvd-2015-03449 https://cve.radiocsirt.org/vuln/cnvd-2015-03449 EUVD-2026-92238 https://cve.radiocsirt.org/vuln/euvd-2026-92238 EUVD-2026-92238 https://cve.radiocsirt.org/vuln/euvd-2026-92238 fkie_cve-2015-3982 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3982 <p>The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.</p> <p>The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3982 GHSA-6wgp-fwfm-mxp3 — Django allows user sessions hijacking via an empty string in the session key https://cve.radiocsirt.org/vuln/ghsa-6wgp-fwfm-mxp3 <p><strong>Affected:</strong> PyPI: Django</p> <p>The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.</p> https://cve.radiocsirt.org/vuln/ghsa-6wgp-fwfm-mxp3 gsd-2015-3982 https://cve.radiocsirt.org/vuln/gsd-2015-3982 gsd-2015-3982 https://cve.radiocsirt.org/vuln/gsd-2015-3982 openSUSE-SU-2023:0077-1 — Security update for python-Django https://cve.radiocsirt.org/vuln/opensuse-su-2023:0077-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0077-1 PYSEC-2015-19 https://cve.radiocsirt.org/vuln/pysec-2015-19 <p><strong>Affected:</strong> PyPI: django</p> <p>The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.</p> https://cve.radiocsirt.org/vuln/pysec-2015-19