Archive
October 2012
Vulnerabilities first published in this month (UTC), newest first.
2 results · Clear filters · Feed
-
High 7.3CVE-2012-5379 Public exploit
Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the to…
-
High 7.5
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.