Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zope zope 2.2.0b3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2000-1211
Zope 2.2.0 up to and including 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow malicious users to perform unauthorized activities.
Zope Zope 2.2.1b1Zope Zope 2.2.2Zope Zope 2.2.3Zope Zope 2.2.4Zope Zope 2.2.0b3Zope Zope 2.2.1Zope Zope 2.2.0Zope Zope 2.2.0a1Zope Zope 2.2.0b1Zope Zope 2.2.0b2Zope Zope 2.2.0b4
5
CVSSv2
CVE-2000-1212
Zope 2.2.0 up to and including 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
Zope Zope 2.2.0b4Zope Zope 2.2.1Zope Zope 2.2.0b2Zope Zope 2.2.0b3Zope Zope 2.2.0a1Zope Zope 2.2.0b1Zope Zope 2.2.3Zope Zope 2.2.4Zope Zope 2.2.0Zope Zope 2.2.1b1Zope Zope 2.2.2
4
CVSSv2
CVE-2008-5102
PythonScripts in Zope 2 2.11.2 and previous versions, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Zope Zope 2.10.3-finalZope Zope 2.10.2-finalZope Zope 2.10.5Zope Zope 2.9.0-finalZope Zope 2.9.6Zope Zope 2.9.5Zope Zope 2.8.0-finalZope Zope 2.8.0-b2Zope Zope 2.8.7Zope Zope 2.8.6Zope Zope 2.7.6-finalZope Zope 2.7.6-b2Zope Zope 2.7.4-c1Zope Zope 2.7.4-b2Zope Zope 2.7.1-b2Zope Zope 2.7.1-b1Zope Zope 2.7.0-b1Zope Zope 2.7.0-a1Zope Zope 2.6.2.b4Zope Zope 2.6.2.b3Zope Zope 2.6.4Zope Zope 2.6.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook