Skip to content
OpenAdvisories

Archive

October 2012

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.3
    CVE-2012-5379 Public exploit

    Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the to…

  • High 7.5
    CVE-2012-4399 Public exploit EPSS 12%

    CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references

    The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.