Skip to content
OpenAdvisories

Archive

2 July 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 117
  2. 214
  3. 3 
  4. 4 
  5. 5 
  6. 626
  7. 715
  8. 815
  9. 925
  10. 10 
  11. 11 
  12. 1211
  13. 1371
  14. 149
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2234
  23. 2316
  24. 24 
  25. 25 
  26. 26 
  27. 2727
  28. 2818
  29. 295
  30. 3040
  31. 31 

3 results · Clear filters · Feed

  • Medium 6.1

    Cross-site Scripting in python-cjson

    Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.

  • Medium —

    Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

    Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the c…

  • Medium 6.1

    Mako contains Cross-site Scripting vulnerability

    Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLo…