Tagged “pip”
CVEs tagged pip, newest first.
4668 CVEsRSS
CVE-2007-2637MediumMoinMoin Improper ACL handling for calendars and includes
MoinMoin Improper ACL handling for calendars and includes
CVE-2007-0901MediumMoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
CVE-2008-1098MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0781MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0782MediumPoCMoinMoin Directory traversal vulnerability
MoinMoin Directory traversal vulnerability
CVE-2008-1393HighPlone Improper Session Management
Plone Improper Session Management
CVE-2008-0780MediumMoinMoin Cross-site scripting (XSS) vulnerability
MoinMoin Cross-site scripting (XSS) vulnerability
CVE-2000-0062HighZope DTML implementation Improper Authentication
Zope DTML implementation Improper Authentication
CVE-2002-0687MediumZope Server vulnerable to DoS via header injection
Zope Server vulnerable to DoS via header injection
CVE-2000-1211HighZope does not properly perform security registration for legacy names
Zope does not properly perform security registration for legacy names
CVE-2002-0170HighZope does not properly verify the access for objects with proxy roles
Zope does not properly verify the access for objects with proxy roles
CVE-2000-0725HighZope does not properly restrict access to the getRoles method
Zope does not properly restrict access to the getRoles method
CVE-2000-1212MediumZope allows attackers to modify raw image and file data
Zope allows attackers to modify raw image and file data
CVE-2002-0688HighZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
CVE-2004-1462HighMoinMoin Improper Access Control
MoinMoin Improper Access Control
CVE-2004-1177Mediummailman Cross-site scripting (XSS) vulnerability
mailman Cross-site scripting (XSS) vulnerability
CVE-2004-1444MediumPoCRoundup Directory traversal vulnerability
Roundup Directory traversal vulnerability
CVE-2004-0412MediumMailman Sensitive Information Disclosure
Mailman Sensitive Information Disclosure
CVE-2004-1463HighMoinMoin Improper Privilege Management
MoinMoin Improper Privilege Management
CVE-2003-0038MediumPoCMailman Cross-site scripting (XSS) vulnerability
Mailman Cross-site scripting (XSS) vulnerability
CVE-2004-0708HighMoinMoin allows administrative access
MoinMoin allows administrative access
CVE-2011-4924Medium· 6.1Zope XSS Vulnerability
Zope XSS Vulnerability
CVE-2011-4076Medium· 5.9OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
CVE-2011-3147Low· 2.8Openstack nova qcow format could expose host filesystem information
Openstack nova qcow format could expose host filesystem information
CVE-2011-4952High· 8.8Cobbler Web Interface Lacks CSRF Protection
Cobbler Web Interface Lacks CSRF Protection
CVE-2010-4237Medium· 5.9Mercurial Improper Certificate Validation vulnerability
Mercurial Improper Certificate Validation vulnerability
CVE-2022-41952Medium· 5.3Uncontrolled Resource Consumption in Matrix Synapse
Uncontrolled Resource Consumption in Matrix Synapse
CVE-2022-24776Medium· 6.1Open Redirect in Flask-AppBuilder
Open Redirect in Flask-AppBuilder
CVE-2021-4180Medium· 4.3Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates
CVE-2022-21822High· 7.5Allocation of Resources Without Limits or Throttling in nvflare
Allocation of Resources Without Limits or Throttling in nvflare