2852 matches found
FreeBSD Ports: py-pycrypto
The remote host is missing an update to the system as announced in the referenced advisory. VID f45c0049-be72-11e1-a284-0023ae8e59f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID f45c0049-be72-11e1-a284-0023ae8e59f0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: py-pycrypto
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PYSEC-2011-26
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...
CVE-2011-3587
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...
PT-2011-4542
Name of the Vulnerable Software and Affected Versions Zope versions 2.12.x through 2.13.x Plone versions 4.0.x through 4.0.9 Plone version 4.1 Plone versions 4.2 through 4.2a2 Description The issue allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/mis...
CVE-2011-3587: Undefined Security Weakness
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...
FreeBSD Ports: subversion, subversion-freebsd, p5-subversion, py-subversion
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: subversion, subversion-freebsd, p5-subversion, py-subversion
The remote host is missing an update to the system as announced in the referenced advisory. VID bce1f76d-82d0-11de-88ea-001a4d49522b OpenVAS Vulnerability Test $ Description: Auto generated from VID bce1f76d-82d0-11de-88ea-001a4d49522b Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: py-pycrypto
The remote host is missing an update to the system as announced in the referenced advisory. VID 5a021595-fba9-11dd-86f3-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5a021595-fba9-11dd-86f3-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: py-pycrypto
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : py-pylons -- Path traversal bug (f5c58fc1-49c0-11dd-b0ba-00163e000016)
Pylons team reports : The error.py controller uses paste.fileapp to serve the static resources to the browser. The default error.py controller uses os.path.join to combine the id from Routes with the media path. Routes prior to 1.8 double unquoted the PATHINFO, resulting in FileApp returning file...
xen xenmon.py / xenbaked insecure temporary file accesss
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
Unfixed XSS vulnerability at eelink.net
Security researcher holisticinfosec, has submitted on 15/01/2008 a cross-site-scripting XSS vulnerability affecting eelink.net, which at the time of submission ranked 502811 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is...
FreeBSD : py-django -- denial of service vulnerability (d2c2952d-85a1-11dc-bfff-003048705d5a)
Django project reports : A per-process cache used by Django's internationalization 'i18n' system to store the results of translation lookups for particular values of the HTTP Accept-Language header used the full value of that header as a key. An attacker could take advantage of this by sending...
CVE-2003-1384
The CVE-2003-1384 entry describes a Cross-site scripting (XSS) vulnerability in PY-Livredor 1.0, specifically in index.php. The affected component is the web form fields (titre, Votre pseudo, Votre e-mail, Votre message). The underlying cause is improper handling of user-supplied input, enabling ...
CVE-2003-1384
Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...
CVE-2003-1384: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...
CVE-2002-1884
CVE-2002-1884 : Public sources describe a login bypass in Py-Membres 3.1 where an attacker can become administrator by setting the pymembs parameter to "admin" in index.php. The connected documents confirm the affected product/version and the root cause (parameters controlling authentication). No...