Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zope zope 2.9.3 vulnerabilities and exploits

(subscribe to this query)
187
VMScore
CVE-2006-3458
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
Zope Zope 2.7.4Zope Zope 2.7.5Zope Zope 2.8.3Zope Zope 2.7.0Zope Zope 2.7.1Zope Zope 2.7.8Zope Zope 2.8.0Zope Zope 2.9.0Zope Zope 2.9.1Zope Zope 2.7.6Zope Zope 2.7.7Zope Zope 2.8.5Zope Zope 2.8.6Zope Zope 2.8.7Zope Zope 2.8.4Zope Zope 2.7.2Zope Zope 2.7.3Zope Zope 2.8.1Zope Zope 2.8.2Zope Zope 2.9.2Zope Zope 2.9.3
383
VMScore
CVE-2010-1104
Cross-site scripting (XSS) vulnerability in Zope 2.8.x prior to 2.8.12, 2.9.x prior to 2.9.12, 2.10.x prior to 2.10.11, 2.11.x prior to 2.11.6, and 2.12.x prior to 2.12.3 allows remote malicious users to inject arbitrary web script or HTML via vectors related to error messages.
Zope Zope 2.8.0-finalZope Zope 2.8.1Zope Zope 2.8.1-b1Zope Zope 2.8.6Zope Zope 2.8.0-b1Zope Zope 2.8.0-b2Zope Zope 2.8.4Zope Zope 2.8.5Zope Zope 2.9.0Zope Zope 2.9.0-b1Zope Zope 2.9.5Zope Zope 2.9.6Zope Zope 2.10.2-b1Zope Zope 2.10.0-finalZope Zope 2.10.4-finalZope Zope 2.10.3Zope Zope 2.11.2Zope Zope 2.11.3Zope Zope 2.11.0a1Zope Zope 2.12.2Zope Zope 2.8Zope Zope 2.8.0
405
VMScore
CVE-2008-5102
PythonScripts in Zope 2 2.11.2 and previous versions, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Zope Zope 2.10.3-finalZope Zope 2.10.2-finalZope Zope 2.10.5Zope Zope 2.9.0-finalZope Zope 2.9.6Zope Zope 2.9.5Zope Zope 2.8.0-finalZope Zope 2.8.0-b2Zope Zope 2.8.7Zope Zope 2.8.6Zope Zope 2.7.6-finalZope Zope 2.7.6-b2Zope Zope 2.7.4-c1Zope Zope 2.7.4-b2Zope Zope 2.7.1-b2Zope Zope 2.7.1-b1Zope Zope 2.7.0-b1Zope Zope 2.7.0-a1Zope Zope 2.6.2.b4Zope Zope 2.6.2.b3Zope Zope 2.6.4Zope Zope 2.6.3
578
VMScore
CVE-2012-5489
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope prior to 2.12.21 and 3.13.x prior to 2.13.11, as used in Plone prior to 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.
Plone Plone 4.2Plone Plone 4.1.6Plone Plone 4.1.5Plone Plone 4.1.4Plone Plone 3.3.1Plone Plone 3.3Plone Plone 3.2.3Plone Plone 3.2.2Plone Plone 3.0.3Plone Plone 3.0.2Plone Plone 3.0.1Plone Plone 3.0Plone Plone 2.0.3Plone Plone 2.0.2Plone Plone 2.0.1Plone Plone 2.0Plone PlonePlone Plone 4.1Plone Plone 4.0.5Plone Plone 3.3.4Plone Plone 3.3.2Plone Plone 3.2.1
570
VMScore
CVE-2012-5486
ZPublisher.HTTPRequest._scrubHeader in Zope 2 prior to 2.13.19, as used in Plone prior to 4.3 beta 1, allows remote malicious users to inject arbitrary HTTP headers via a linefeed (LF) character.
Plone Plone 3.3Plone Plone 1.0Plone Plone 4.2Plone Plone 4.0.5Plone Plone 3.0.1Plone Plone 1.0.3Plone Plone 3.0Plone Plone 3.2.3Plone Plone 3.1.4Plone Plone 3.1.5.1Plone Plone 4.2.0.1Plone Plone 2.1.4Plone Plone 4.0.2Plone Plone 4.2.1.1Plone Plone 3.3.5Plone Plone 3.0.6Plone Plone 2.5.4Plone Plone 3.2Plone Plone 3.1.1Plone Plone 4.3Plone Plone 2.1.1Plone Plone 3.3.4
383
VMScore
CVE-2012-5507
AccessControl/AuthEncoding.py in Zope prior to 2.13.19, as used in Plone prior to 4.2.3 and 4.3 before beta 1, allows remote malicious users to obtain passwords via vectors involving timing discrepancies in password validation.
Zope Zope 2.10.3Zope Zope 2.11.3Zope Zope 2.6.1Zope Zope 2.7.0Zope Zope 2.7.7Zope Zope 2.8.1Zope Zope 2.9.5Zope Zope 2.9.7Zope Zope 2.10.8Zope Zope 2.11.0Zope Zope 2.11.1Zope Zope 2.11.2Zope Zope 2.8.6Zope Zope 2.8.8Zope Zope 2.9.2Zope Zope 2.9.3Zope Zope 2.7.3Zope Zope 2.7.4Zope Zope 2.7.5Zope Zope 2.7.6Zope Zope 2.13.18Zope Zope 2.5.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook