Advisory Catalog

Cobbler is vulnerable to code injection

Improper Authentication in pyftpdlib

pyftpdlib Use of Insufficiently Random Values of port selection on PASV command

Improper Input Validation in pyftpdlib

pyftpdlib vulnerable to allocation of resources without limits

Improper Authentication in pyftpdlib

Improper Access Control in pyftpdlib

Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

Zope Denial of Service (DoS) vulnerability in ZServer

MoinMoin Improper Access Control vulnerability

MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

MoinMoin improper sanitizes user profiles

MoinMoin has improper default configuration

Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils

PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection

Django Regex Algorithmic Complexity Causes Denial of Service

Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

Django Admin Media Handler Vulnerable to Directory Traversal

MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

FormEncode Access Restrictions Bypass

MoinMoin Denial of Service vulnerability via password_checker function

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample

Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) at

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime m

Trac vulnerable to denial of service

Django cross-site request forgery (CSRF) vulnerability

MoinMoin vulnerable to privilege escalation

Plone Cross-site request forgery (CSRF)

Plone Improper Session Management

Plone CMS Improper Session Management

Paramiko Unsafe randomness usage may allow access to sensitive information

CherryPy Malicious cookies allow access to files outside the session directory

Django vulnerable to Denial of Service via i18n middleware component

Trac missing Content-Disposition HTTP header

Django Arbitrary Code Execution

Edgewall Trac Cross-site request forgery (CSRF) vulnerability

Plone allows anonymous users to reset any users password through the web via Password Reset Tool

Trac reStructuredText breach of privacy and denial of service vulnerability

CherryPy Directory traversal vulnerability

Py2Play Unpickles Untrusted Objects

Cheetah Path Search Order Hijacking

MoinMoin Improper Access Control

MoinMoin Improper Privilege Management

MoinMoin allows administrative access

ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

Zope does not properly verify the access for objects with proxy roles

Zope does not properly perform security registration for legacy names

Zope does not properly restrict access to the getRoles method

Zope DocumentTemplate package allows unauthenticated write