Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2008-1393 Vulnerability in plone (CVE-2008-1393)
vulnerability in plone (CVE-2008-1393). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
CVE-2008-1394 Vulnerability in plone (CVE-2008-1394)
vulnerability in plone (CVE-2008-1394). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
CVE-2007-2637 Vulnerability in moin (CVE-2007-2637)
vulnerability in moin (CVE-2007-2637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2007-0902 Vulnerability in moin (CVE-2007-0902)
vulnerability in moin (CVE-2007-0902). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2007-0901 Cross-Site Scripting (XSS) in moin (CVE-2007-0901)
cross-site scripting in moin (CVE-2007-0901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
CVE-2008-1098 Cross-Site Scripting (XSS) in moin (CVE-2008-1098)
cross-site scripting in moin (CVE-2008-1098). Risk of unauthorized operations or information disclosure.
CVE-2008-0781 Cross-Site Scripting (XSS) in moin (CVE-2008-0781)
cross-site scripting in moin (CVE-2008-0781). Risk of unauthorized operations or information disclosure.
CVE-2008-1099 Vulnerability in moin (CVE-2008-1099)
vulnerability in moin (CVE-2008-1099). Risk of unauthorized operations or information disclosure. Exploitable via ``_macro_Getval``.
CVE-2007-0857 Cross-Site Scripting (XSS) in moin (CVE-2007-0857)
cross-site scripting in moin (CVE-2007-0857). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.7` or later.
CVE-2008-0782 Path Traversal in moin (CVE-2008-0782)
path traversal in moin (CVE-2008-0782). Risk of unauthorized operations or information disclosure.
CVE-2008-0780 Cross-Site Scripting (XSS) in moin (CVE-2008-0780)
cross-site scripting in moin (CVE-2008-0780). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.1` or later.
CVE-2007-5201 Information Disclosure in duplicity (CVE-2007-5201)
vulnerability in duplicity (CVE-2007-5201). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.9` or later.
CVE-2007-0404 Vulnerability in django (CVE-2007-0404)
vulnerability in django (CVE-2007-0404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0` or later.
CVE-2002-0687 Vulnerability in zope (CVE-2002-0687)
vulnerability in zope (CVE-2002-0687). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1b2` or later.
CVE-2000-1211 Authentication Bypass in zope (CVE-2000-1211)
authentication bypass in zope (CVE-2000-1211). Risk of unauthorized operations or information disclosure.
CVE-2002-0170 Vulnerability in zope (CVE-2002-0170)
vulnerability in zope (CVE-2002-0170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1` or later.
CVE-2000-1212 Vulnerability in zope (CVE-2000-1212)
vulnerability in zope (CVE-2000-1212). Risk of unauthorized operations or information disclosure.
CVE-2005-2875 Unsafe Deserialization in py2play (CVE-2005-2875)
vulnerability in py2play (CVE-2005-2875). Risk of unauthorized operations or information disclosure.
CVE-2002-0688 Vulnerability in zope (CVE-2002-0688)
vulnerability in zope (CVE-2002-0688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.0` or later.
CVE-2006-1711 Vulnerability in plone (CVE-2006-1711)
vulnerability in plone (CVE-2006-1711). Risk of unauthorized operations or information disclosure.
CVE-2007-0405 Vulnerability in django (CVE-2007-0405)
vulnerability in django (CVE-2007-0405). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0` or later.
CVE-2005-1632 Vulnerability in cheetah (CVE-2005-1632)
vulnerability in cheetah (CVE-2005-1632). Risk of unauthorized operations or information disclosure.
CVE-2000-0062 Authentication Bypass in zope (CVE-2000-0062)
authentication bypass in zope (CVE-2000-0062). Risk of unauthorized operations or information disclosure.
CVE-2000-0725 Vulnerability in zope (CVE-2000-0725)
vulnerability in zope (CVE-2000-0725). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1` or later.
CVE-2004-1444 Path Traversal in roundup (CVE-2004-1444)
path traversal in roundup (CVE-2004-1444). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.3` or later.
CVE-2011-4076 Information Disclosure in nova (CVE-2011-4076)
vulnerability in nova (CVE-2011-4076). Confidential information can be exposed externally. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2004-1463 Vulnerability in moin (CVE-2004-1463)
vulnerability in moin (CVE-2004-1463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.3` or later.
CVE-2004-1462 Vulnerability in moin (CVE-2004-1462)
vulnerability in moin (CVE-2004-1462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.3` or later.
CVE-2004-0708 Vulnerability in moin (CVE-2004-0708)
vulnerability in moin (CVE-2004-0708). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.2` or later.
CVE-2004-1177 Cross-Site Scripting (XSS) in mailman (CVE-2004-1177)
cross-site scripting in mailman (CVE-2004-1177). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5` or later.
CVE-2004-0412 Information Disclosure in mailman (CVE-2004-0412)
vulnerability in mailman (CVE-2004-0412). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5` or later.
CVE-2003-0038 Cross-Site Scripting (XSS) in mailman (CVE-2003-0038)
cross-site scripting in mailman (CVE-2003-0038). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.1` or later.
CVE-2021-4180 Information Disclosure in tripleo-heat-templates (CVE-2021-4180)
vulnerability in tripleo-heat-templates (CVE-2021-4180). Risk of unauthorized operations or information disclosure. Exploitable via ``master``. Mitigation: upgrade to `11.6.1` or later.
CVE-2011-3147 Information Disclosure in nova (CVE-2011-3147)
vulnerability in nova (CVE-2011-3147). Confidential information can be exposed externally. Mitigation: upgrade to `12.0.0a0` or later.
CVE-2010-4237 Vulnerability in mercurial (CVE-2010-4237)
vulnerability in mercurial (CVE-2010-4237). Data can be tampered with by attackers. Mitigation: upgrade to `1.6.4` or later.
CVE-2022-41952 Vulnerability in matrix-synapse (CVE-2022-41952)
vulnerability in matrix-synapse (CVE-2022-41952). Risk of unauthorized operations or information disclosure. Exploitable via ``max_spider_size``. Mitigation: upgrade to `1.52.0` or later.
CVE-2022-24776 Open Redirect in flask-appbuilder (CVE-2022-24776)
vulnerability in flask-appbuilder (CVE-2022-24776). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.5` or later.
CVE-2011-4952 Cobbler Web Interface Lacks CSRF Protection
Cobbler Web Interface Lacks CSRF Protection
CVE-2022-0959 Path Traversal in pgadmin4 (CVE-2022-0959)
path traversal in pgadmin4 (CVE-2022-0959). Data can be tampered with by attackers. Mitigation: upgrade to `6.7` or later.
CVE-2022-21822 Vulnerability in nvflare (CVE-2022-21822)
vulnerability in nvflare (CVE-2022-21822). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.16` or later.
CVE-2021-45848 Vulnerability in nicotine-plus (CVE-2021-45848)
vulnerability in nicotine-plus (CVE-2021-45848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
CVE-2022-25511 Path Traversal in freetakserver-ui (CVE-2022-25511)
path traversal in freetakserver-ui (CVE-2022-25511). Data can be tampered with by attackers.
CVE-2022-25512 Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI
Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI
CVE-2022-25506 SQL Injection in freetakserver-ui (CVE-2022-25506)
SQL injection in freetakserver-ui (CVE-2022-25506). Confidential information can be exposed externally.
CVE-2022-25507 Cross-Site Scripting (XSS) in freetakserver-ui (CVE-2022-25507)
cross-site scripting in freetakserver-ui (CVE-2022-25507). Risk of unauthorized operations or information disclosure.
CVE-2022-27193 Vulnerability in cvrf2csaf (CVE-2022-27193)
vulnerability in cvrf2csaf (CVE-2022-27193). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0rc2` or later.
CVE-2022-0932 saleor Missing Authorization vulnerability
saleor Missing Authorization vulnerability
CVE-2022-0637 Open Redirect in pollbot (CVE-2022-0637)
vulnerability in pollbot (CVE-2022-0637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.6` or later.
CVE-2021-44255 Unrestricted File Upload in motioneye (CVE-2021-44255)
vulnerability in motioneye (CVE-2021-44255). Successful exploitation can lead to full system takeover.
CVE-2021-3654 Open Redirect in nova (CVE-2021-3654)
vulnerability in nova (CVE-2021-3654). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `23.0.3` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →