Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2009-0260MediumPoCMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2009-5145Medium· 6.1Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
CVE-2008-4571MediumPlone Cross-site Scripting vulnerability in the LiveSearch module
Plone Cross-site Scripting vulnerability in the LiveSearch module
CVE-2006-4249Medium· 5.9Plone allows a user to masquerade as a group
Plone allows a user to masquerade as a group
CVE-2006-4247Critical· 9.1Plone allows anonymous users to reset any users password through the web via Password Reset Tool
Plone allows anonymous users to reset any users password through the web via Password Reset Tool
CVE-2008-0164High· 7.5Plone Cross-site request forgery (CSRF)
Plone Cross-site request forgery (CSRF)
CVE-2007-5201MediumFTP backend for Duplicity Discloses Passwords to Process Listing
FTP backend for Duplicity Discloses Passwords to Process Listing
CVE-2005-2875HighPy2Play Unpickles Untrusted Objects
Py2Play Unpickles Untrusted Objects
CVE-2005-1632HighCheetah Path Search Order Hijacking
Cheetah Path Search Order Hijacking
CVE-2008-2942MediumMercurial Directory traversal vulnerability
Mercurial Directory traversal vulnerability
CVE-2007-0404HighDjango Arbitrary Code Execution
Django Arbitrary Code Execution
CVE-2007-0902MediumMoinMoin Insertion of Sensitive Information into Log File
MoinMoin Insertion of Sensitive Information into Log File
CVE-2007-0405MediumDjango Improper Access Control
Django Improper Access Control
CVE-2008-1394HighPlone CMS Improper Session Management
Plone CMS Improper Session Management
CVE-2007-0857MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-1099MediumMoinMoin Improper Access Control
MoinMoin Improper Access Control
CVE-2006-1711MediumPoCPlone allows remote users to modify arbitrary portraits
Plone allows remote users to modify arbitrary portraits
CVE-2008-1396MediumPlone credentials stored in session cookie
Plone credentials stored in session cookie
CVE-2007-2637MediumMoinMoin Improper ACL handling for calendars and includes
MoinMoin Improper ACL handling for calendars and includes
CVE-2007-0901MediumMoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
CVE-2008-1098MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0781MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0782MediumPoCMoinMoin Directory traversal vulnerability
MoinMoin Directory traversal vulnerability
CVE-2008-1393HighPlone Improper Session Management
Plone Improper Session Management
CVE-2008-0780MediumMoinMoin Cross-site scripting (XSS) vulnerability
MoinMoin Cross-site scripting (XSS) vulnerability
CVE-2022-1227High· 8.8PoCPodman publishes a malicious image to public registries
Podman publishes a malicious image to public registries
CVE-2000-0062HighZope DTML implementation Improper Authentication
Zope DTML implementation Improper Authentication
CVE-2002-0687MediumZope Server vulnerable to DoS via header injection
Zope Server vulnerable to DoS via header injection
CVE-2000-1211HighZope does not properly perform security registration for legacy names
Zope does not properly perform security registration for legacy names
CVE-2002-0170HighZope does not properly verify the access for objects with proxy roles
Zope does not properly verify the access for objects with proxy roles