Tagged “osv”
CVEs tagged osv, newest first.
5752 CVEsRSS
CVE-2000-0483MediumZope DocumentTemplate package allows unauthenticated write
Zope DocumentTemplate package allows unauthenticated write
CVE-2009-2967Medium· 6.1Buildbot vulnerable to cross-site scripting
Buildbot vulnerable to cross-site scripting
CVE-2009-2959Medium· 6.1Buildbot Cross-site scripting (XSS) vulnerability
Buildbot Cross-site scripting (XSS) vulnerability
CVE-2009-0312MediumMoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
CVE-2009-2737MediumRoundup Improper Access Control
Roundup Improper Access Control
CVE-2009-0260MediumPoCMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2009-5145Medium· 6.1Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
CVE-2008-4571MediumPlone Cross-site Scripting vulnerability in the LiveSearch module
Plone Cross-site Scripting vulnerability in the LiveSearch module
CVE-2006-4249Medium· 5.9Plone allows a user to masquerade as a group
Plone allows a user to masquerade as a group
CVE-2006-4247Critical· 9.1Plone allows anonymous users to reset any users password through the web via Password Reset Tool
Plone allows anonymous users to reset any users password through the web via Password Reset Tool
CVE-2008-0164High· 7.5Plone Cross-site request forgery (CSRF)
Plone Cross-site request forgery (CSRF)
CVE-2007-5201MediumFTP backend for Duplicity Discloses Passwords to Process Listing
FTP backend for Duplicity Discloses Passwords to Process Listing
CVE-2005-2875HighPy2Play Unpickles Untrusted Objects
Py2Play Unpickles Untrusted Objects
CVE-2005-1632HighCheetah Path Search Order Hijacking
Cheetah Path Search Order Hijacking
CVE-2008-2942MediumMercurial Directory traversal vulnerability
Mercurial Directory traversal vulnerability
CVE-2007-0404HighDjango Arbitrary Code Execution
Django Arbitrary Code Execution
CVE-2007-0902MediumMoinMoin Insertion of Sensitive Information into Log File
MoinMoin Insertion of Sensitive Information into Log File
CVE-2007-0405MediumDjango Improper Access Control
Django Improper Access Control
CVE-2008-1394HighPlone CMS Improper Session Management
Plone CMS Improper Session Management
CVE-2007-0857MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-1099MediumMoinMoin Improper Access Control
MoinMoin Improper Access Control
CVE-2006-1711MediumPoCPlone allows remote users to modify arbitrary portraits
Plone allows remote users to modify arbitrary portraits
CVE-2008-1396MediumPlone credentials stored in session cookie
Plone credentials stored in session cookie
CVE-2007-2637MediumMoinMoin Improper ACL handling for calendars and includes
MoinMoin Improper ACL handling for calendars and includes
CVE-2007-0901MediumMoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
CVE-2008-1098MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0781MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0782MediumPoCMoinMoin Directory traversal vulnerability
MoinMoin Directory traversal vulnerability
CVE-2008-1393HighPlone Improper Session Management
Plone Improper Session Management
CVE-2008-0780MediumMoinMoin Cross-site scripting (XSS) vulnerability
MoinMoin Cross-site scripting (XSS) vulnerability