Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2008-4571 |
|
Cross-Site Scripting (XSS) in plone (CVE-2008-4571)
cross-site scripting in plone (CVE-2008-4571). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.4` or later.
|
| CVE-2009-2737 |
|
Vulnerability in roundup (CVE-2009-2737)
vulnerability in roundup (CVE-2009-2737). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.7` or later.
|
| CVE-2009-0312 |
|
Cross-Site Scripting (XSS) in moin (CVE-2009-0312)
cross-site scripting in moin (CVE-2009-0312). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.
|
| CVE-2009-0260 |
|
Cross-Site Scripting (XSS) in moin (CVE-2009-0260)
cross-site scripting in moin (CVE-2009-0260). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.1` or later.
|
| CVE-2008-2942 |
|
Path Traversal in mercurial (CVE-2008-2942)
path traversal in mercurial (CVE-2008-2942). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.2` or later.
|
| CVE-2008-1396 |
|
Vulnerability in plone (CVE-2008-1396)
vulnerability in plone (CVE-2008-1396). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-1393 |
|
Vulnerability in plone (CVE-2008-1393)
vulnerability in plone (CVE-2008-1393). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
|
| CVE-2008-1394 |
|
Vulnerability in plone (CVE-2008-1394)
vulnerability in plone (CVE-2008-1394). Risk of unauthorized operations or information disclosure. Exploitable via ``__ac``. Mitigation: upgrade to `3.0` or later.
|
| CVE-2007-2637 |
|
Vulnerability in moin (CVE-2007-2637)
vulnerability in moin (CVE-2007-2637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
|
| CVE-2007-0902 |
|
Vulnerability in moin (CVE-2007-0902)
vulnerability in moin (CVE-2007-0902). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
|
| CVE-2007-0901 |
|
Cross-Site Scripting (XSS) in moin (CVE-2007-0901)
cross-site scripting in moin (CVE-2007-0901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.8` or later.
|
| CVE-2008-1098 |
|
Cross-Site Scripting (XSS) in moin (CVE-2008-1098)
cross-site scripting in moin (CVE-2008-1098). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-0781 |
|
Cross-Site Scripting (XSS) in moin (CVE-2008-0781)
cross-site scripting in moin (CVE-2008-0781). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-1099 |
|
Vulnerability in moin (CVE-2008-1099)
vulnerability in moin (CVE-2008-1099). Risk of unauthorized operations or information disclosure. Exploitable via ``_macro_Getval``.
|
| CVE-2007-0857 |
|
Cross-Site Scripting (XSS) in moin (CVE-2007-0857)
cross-site scripting in moin (CVE-2007-0857). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.7` or later.
|
| CVE-2008-0782 |
|
Path Traversal in moin (CVE-2008-0782)
path traversal in moin (CVE-2008-0782). Risk of unauthorized operations or information disclosure.
|
| CVE-2008-0780 |
|
Cross-Site Scripting (XSS) in moin (CVE-2008-0780)
cross-site scripting in moin (CVE-2008-0780). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2007-5201 |
|
Information Disclosure in duplicity (CVE-2007-5201)
vulnerability in duplicity (CVE-2007-5201). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.9` or later.
|
| CVE-2007-0404 |
|
Vulnerability in django (CVE-2007-0404)
vulnerability in django (CVE-2007-0404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0` or later.
|
| CVE-2002-0687 |
|
Vulnerability in zope (CVE-2002-0687)
vulnerability in zope (CVE-2002-0687). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1b2` or later.
|
| CVE-2000-1211 |
|
Authentication Bypass in zope (CVE-2000-1211)
authentication bypass in zope (CVE-2000-1211). Risk of unauthorized operations or information disclosure.
|
| CVE-2002-0170 |
|
Vulnerability in zope (CVE-2002-0170)
vulnerability in zope (CVE-2002-0170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1` or later.
|
| CVE-2000-1212 |
|
Vulnerability in zope (CVE-2000-1212)
vulnerability in zope (CVE-2000-1212). Risk of unauthorized operations or information disclosure.
|
| CVE-2005-2875 |
|
Unsafe Deserialization in py2play (CVE-2005-2875)
vulnerability in py2play (CVE-2005-2875). Risk of unauthorized operations or information disclosure.
|
| CVE-2002-0688 |
|
Vulnerability in zope (CVE-2002-0688)
vulnerability in zope (CVE-2002-0688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.0` or later.
|
| CVE-2006-1711 |
|
Vulnerability in plone (CVE-2006-1711)
vulnerability in plone (CVE-2006-1711). Risk of unauthorized operations or information disclosure.
|
| CVE-2007-0405 |
|
Vulnerability in django (CVE-2007-0405)
vulnerability in django (CVE-2007-0405). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0` or later.
|
| CVE-2005-1632 |
|
Vulnerability in cheetah (CVE-2005-1632)
vulnerability in cheetah (CVE-2005-1632). Risk of unauthorized operations or information disclosure.
|
| CVE-2000-0062 |
|
Authentication Bypass in zope (CVE-2000-0062)
authentication bypass in zope (CVE-2000-0062). Risk of unauthorized operations or information disclosure.
|
| CVE-2000-0725 |
|
Vulnerability in zope (CVE-2000-0725)
vulnerability in zope (CVE-2000-0725). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1` or later.
|
| CVE-2004-1444 |
|
Path Traversal in roundup (CVE-2004-1444)
path traversal in roundup (CVE-2004-1444). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.3` or later.
|
| CVE-2011-4076 |
|
Information Disclosure in nova (CVE-2011-4076)
vulnerability in nova (CVE-2011-4076). Confidential information can be exposed externally. Mitigation: upgrade to `12.0.0a0` or later.
|
| CVE-2004-1463 |
|
Vulnerability in moin (CVE-2004-1463)
vulnerability in moin (CVE-2004-1463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.3` or later.
|
| CVE-2004-1462 |
|
Vulnerability in moin (CVE-2004-1462)
vulnerability in moin (CVE-2004-1462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.3` or later.
|
| CVE-2004-0708 |
|
Vulnerability in moin (CVE-2004-0708)
vulnerability in moin (CVE-2004-0708). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.2` or later.
|
| CVE-2004-1177 |
|
Cross-Site Scripting (XSS) in mailman (CVE-2004-1177)
cross-site scripting in mailman (CVE-2004-1177). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5` or later.
|
| CVE-2004-0412 |
|
Information Disclosure in mailman (CVE-2004-0412)
vulnerability in mailman (CVE-2004-0412). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5` or later.
|
| CVE-2003-0038 |
|
Cross-Site Scripting (XSS) in mailman (CVE-2003-0038)
cross-site scripting in mailman (CVE-2003-0038). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.1` or later.
|
| CVE-2021-4180 |
|
Information Disclosure in tripleo-heat-templates (CVE-2021-4180)
vulnerability in tripleo-heat-templates (CVE-2021-4180). Risk of unauthorized operations or information disclosure. Exploitable via ``master``. Mitigation: upgrade to `11.6.1` or later.
|
| CVE-2011-3147 |
|
Information Disclosure in nova (CVE-2011-3147)
vulnerability in nova (CVE-2011-3147). Confidential information can be exposed externally. Mitigation: upgrade to `12.0.0a0` or later.
|
| CVE-2010-4237 |
|
Vulnerability in mercurial (CVE-2010-4237)
vulnerability in mercurial (CVE-2010-4237). Data can be tampered with by attackers. Mitigation: upgrade to `1.6.4` or later.
|
| CVE-2022-41952 |
|
Vulnerability in matrix-synapse (CVE-2022-41952)
vulnerability in matrix-synapse (CVE-2022-41952). Risk of unauthorized operations or information disclosure. Exploitable via ``max_spider_size``. Mitigation: upgrade to `1.52.0` or later.
|
| CVE-2022-24776 |
|
Open Redirect in flask-appbuilder (CVE-2022-24776)
vulnerability in flask-appbuilder (CVE-2022-24776). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.5` or later.
|
| CVE-2011-4952 |
|
Cobbler Web Interface Lacks CSRF Protection
Cobbler Web Interface Lacks CSRF Protection
|
| CVE-2022-0959 |
|
Path Traversal in pgadmin4 (CVE-2022-0959)
path traversal in pgadmin4 (CVE-2022-0959). Data can be tampered with by attackers. Mitigation: upgrade to `6.7` or later.
|
| CVE-2022-21822 |
|
Vulnerability in nvflare (CVE-2022-21822)
vulnerability in nvflare (CVE-2022-21822). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.16` or later.
|
| CVE-2021-45848 |
|
Vulnerability in nicotine-plus (CVE-2021-45848)
vulnerability in nicotine-plus (CVE-2021-45848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| CVE-2022-25511 |
|
Path Traversal in freetakserver-ui (CVE-2022-25511)
path traversal in freetakserver-ui (CVE-2022-25511). Data can be tampered with by attackers.
|
| CVE-2022-25512 |
|
Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI
Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI
|
| CVE-2022-25506 |
|
SQL Injection in freetakserver-ui (CVE-2022-25506)
SQL injection in freetakserver-ui (CVE-2022-25506). Confidential information can be exposed externally.
|