Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zope zope 2.8.7 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2006-4684
The docutils module in Zope (Zope2) 2.7.0 up to and including 2.7.9 and 2.8.0 up to and including 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote malicious users to read arbitrary files via a csv_table directive, a different vulne...
Zope Zope 2.7.5Zope Zope 2.7.6Zope Zope 2.8.3Zope Zope 2.8.4Zope Zope 2.7.7Zope Zope 2.7.8Zope Zope 2.8.5Zope Zope 2.8.6Zope Zope 2.7.0Zope Zope 2.7.1Zope Zope 2.7.9Zope Zope 2.8.0Zope Zope 2.8.7Zope Zope 2.8.8Zope Zope 2.7.2Zope Zope 2.7.3Zope Zope 2.7.4Zope Zope 2.8.1Zope Zope 2.8.2
187
VMScore
CVE-2006-3458
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
Zope Zope 2.7.4Zope Zope 2.7.5Zope Zope 2.8.3Zope Zope 2.7.0Zope Zope 2.7.1Zope Zope 2.7.8Zope Zope 2.8.0Zope Zope 2.9.0Zope Zope 2.9.1Zope Zope 2.7.6Zope Zope 2.7.7Zope Zope 2.8.5Zope Zope 2.8.6Zope Zope 2.8.7Zope Zope 2.8.4Zope Zope 2.7.2Zope Zope 2.7.3Zope Zope 2.8.1Zope Zope 2.8.2Zope Zope 2.9.2Zope Zope 2.9.3
383
VMScore
CVE-2010-1104
Cross-site scripting (XSS) vulnerability in Zope 2.8.x prior to 2.8.12, 2.9.x prior to 2.9.12, 2.10.x prior to 2.10.11, 2.11.x prior to 2.11.6, and 2.12.x prior to 2.12.3 allows remote malicious users to inject arbitrary web script or HTML via vectors related to error messages.
Zope Zope 2.8.0-finalZope Zope 2.8.1Zope Zope 2.8.1-b1Zope Zope 2.8.6Zope Zope 2.8.0-b1Zope Zope 2.8.0-b2Zope Zope 2.8.4Zope Zope 2.8.5Zope Zope 2.9.0Zope Zope 2.9.0-b1Zope Zope 2.9.5Zope Zope 2.9.6Zope Zope 2.10.2-b1Zope Zope 2.10.0-finalZope Zope 2.10.4-finalZope Zope 2.10.3Zope Zope 2.11.2Zope Zope 2.11.3Zope Zope 2.11.0a1Zope Zope 2.12.2Zope Zope 2.8Zope Zope 2.8.0
405
VMScore
CVE-2008-5102
PythonScripts in Zope 2 2.11.2 and previous versions, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Zope Zope 2.10.3-finalZope Zope 2.10.2-finalZope Zope 2.10.5Zope Zope 2.9.0-finalZope Zope 2.9.6Zope Zope 2.9.5Zope Zope 2.8.0-finalZope Zope 2.8.0-b2Zope Zope 2.8.7Zope Zope 2.8.6Zope Zope 2.7.6-finalZope Zope 2.7.6-b2Zope Zope 2.7.4-c1Zope Zope 2.7.4-b2Zope Zope 2.7.1-b2Zope Zope 2.7.1-b1Zope Zope 2.7.0-b1Zope Zope 2.7.0-a1Zope Zope 2.6.2.b4Zope Zope 2.6.2.b3Zope Zope 2.6.4Zope Zope 2.6.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook