Open Source Vulnerabilities

django, django

Django Cross-Site Request Forgery vulnerability

zope2, plone, plone

Plone and Zope2 do not reseed pseudo-random number generator

django, django

Cross-site request forgery in Django

zope2, plone, plone

Plone and Zope2 affected by Race Condition

products-passwordresettool, products-cmfplone, products-cmfplone, plone

Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool

plone

Plone Denial of Service vulnerability

django-piston

Django-piston and Django-tastypie do not properly deserialize YAML data

feedparser

feedparser denial of service vulnerability

products-plonepas

Moderate severity vulnerability that affects Products.PlonePAS

sensu

Low severity vulnerability that affects sensu

ciborg

Ciborg gem for Ruby allows local users to write files and gain privileges via Symlink

kcapifony

Kcapifony gem for Ruby places database user passwords on the command line

python-cryptography

python-cryptography vulnerability

mathjax, mathjax, mathjax

wesnoth-1.14

civicrm

numpy

CVE-2018-1999024 affecting package numpy for versions less than 1.26.3-4

ceph

CVE-2018-1999023 affecting package ceph for versions less than 18.2.1-1

civicrm, civicrm, civicrm, civicrm

wesnoth-1.12, wesnoth-1.12

mathjax, mathjax, mathjax

ffmpeg, ffmpeg, ffmpeg

,

ffmpeg, ffmpeg, ffmpeg

,

ffmpeg, ffmpeg, ffmpeg

,

ffmpeg, ffmpeg, ffmpeg

,

ffmpeg, ffmpeg, ffmpeg

,