Unrated
CVE-2012-3540
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
High
CVE-2012-2921
feedparser denial of service vulnerability
High
CVE-2011-4462
Plone Denial of Service vulnerability
High
CVE-2011-4140
Django Cross-Site Request Forgery vulnerability
High
CVE-2011-4137
Denial of service in django
Medium
CVE-2011-4136
Session manipulation in Django
High
CVE-2011-2528
High severity vulnerability that affects Plone and Zope2
Medium
CVE-2011-1949
Plone Cross-site Scripting vulnerability
Medium
CVE-2011-1158
feedparser Cross-site Scripting vulnerability
Medium
CVE-2011-1157
feedparser Cross-site Scripting vulnerability
High
CVE-2011-1156
feedparser denial of service vulnerability
Medium
CVE-2009-5065
feedparser Cross-site Scripting vulnerability
High
CVE-2011-0696
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site requ
Medium
CVE-2011-0697
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file u
Critical
CVE-2011-0698
Directory traversal in Django
High
CVE-2010-4534
The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain objec
Medium
CVE-2010-4535
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp
High
CVE-2010-3494
Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib
Medium
CVE-2009-5013
Uncontrolled Resource Consumption in pyftpdlib
High
CVE-2009-5012
Improper Access Control in pyftpdlib
Medium
CVE-2009-5011
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib
Medium
CVE-2009-5010
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in pyftpdlib
Medium
CVE-2008-7264
Improper input validation in pyftpdlib
Medium
CVE-2008-7263
Improper Authentication in pyftpdlib
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.