Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...

Zope allows remote attackers to read arbitrary files

The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...

GHSA-HM8G-JXJJ-GFM3 Zope allows remote attackers to read arbitrary files

The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...

Trac reStructuredText breach of privacy and denial of service vulnerability

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text reStructuredText functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting XSS attacks, or cause a denial of service via...

Zope allows local users to read arbitrary files

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 Zope2 does not disable the "raw" command when providing untrusted users with restructured text reStructuredText functionality from docutils, which allows local users to read arbitrary files...

python27:2.7 security, bug fix, and enhancement update

An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet,...

GHSA-CG75-6938-WX58 python-docutils allows insecure usage of temporary files

python-docutils allows insecure usage of temporary files...

python-docutils allows insecure usage of temporary files

python-docutils allows insecure usage of temporary files...

python36:3.6 bug fix and enhancement update

An update is available for python-pymongo, python-docutils, python-pygments, python-PyMySQL, python-docs, python36, python-virtualenv, python-distro, python-nose, python-wheel, scipy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

DEBIAN-CVE-2009-5042

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

PYSEC-2019-176

python-docutils allows insecure usage of temporary files...

Code injection

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

PYSEC-2019-176

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

CVE-2009-5042 involves the python-docutils project and is documented as allowing insecure usage of temporary files. The connected sources corroborate this vulnerability across multiple feeds (NVD, RH, OSV, Debian, GHSA, and others). Public metrics indicate two CVSS baselines: CVSS v2 base score 6...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

python27:2.7 bug fix update

An update is available for python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet, python-markupsafe, python-pluggy,...