Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2005-1632Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local userPyPI · cheetah
- CVE-2000-1210Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a ..Maven · org.apache.tomcat:tomcat
- CVE-2000-1211Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objectsPyPI · zope
- CVE-2000-1212Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editinPyPI · zope
- CVE-2001-0829A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, wMaven · org.apache.tomcat:tomcat
- CVE-2000-0483The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.PyPI · zope
- CVE-2000-0759Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generatesMaven · org.apache.tomcat:tomcat
- CVE-2000-0062The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.PyPI · zope