CVE-2011-3370

StatusNet (PHP-based micro‑blogging software) before version 0.9.9 is affected by a cross‑site scripting (XSS) vulnerability. Root cause: improper validation of client‑side data by the web application. Impact: potential execution of client‑side code. Remediation/patch details are not provided in ...

DEBIAN-CVE-2016-1231

Directory traversal vulnerability in the HTTP file-serving module modhttpfiles in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path...

PT-2015-4907 · Dulwich · Dulwich

Name of the Vulnerable Software and Affected Versions: Dulwich versions prior to 0.9.9 Description: The issue is related to a buffer overflow in the C implementation of the apply delta function in pack.c. This allows remote attackers to execute arbitrary code via a crafted pack file...