Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 06:24:57 +0000 EUVD-2026-107292 https://cve.radiocsirt.org/vuln/euvd-2026-107292 EUVD-2026-107292 https://cve.radiocsirt.org/vuln/euvd-2026-107292 fkie_cve-2013-4198 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4198 <p>mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.</p> <p>mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4198 GHSA-qjxf-6pr8-j87v — Plone's authenticated users able to alter their password despite of policy definition https://cve.radiocsirt.org/vuln/ghsa-qjxf-6pr8-j87v <p><strong>Affected:</strong> PyPI: Plone</p> <p>`mail_password.py` in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.</p> <p><strong>Affected:</strong> PyPI: Plone</p> <p>`mail_password.py` in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.</p> https://cve.radiocsirt.org/vuln/ghsa-qjxf-6pr8-j87v gsd-2013-4198 https://cve.radiocsirt.org/vuln/gsd-2013-4198 gsd-2013-4198 https://cve.radiocsirt.org/vuln/gsd-2013-4198 PYSEC-2014-62 https://cve.radiocsirt.org/vuln/pysec-2014-62 <p><strong>Affected:</strong> PyPI: plone</p> <p>mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.</p> <p><strong>Affected:</strong> PyPI: plone</p> <p>mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.</p> https://cve.radiocsirt.org/vuln/pysec-2014-62