Skip to content
OpenAdvisories

Archive

30 March 2009

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5

    MoinMoin Denial of Service vulnerability via password_checker function

    The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown ve…

  • High 7.5

    FormEncode Access Restrictions Bypass

    schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.

  • High —

    Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability

    The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attr…