Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zope zope vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2000-0062
The DTML implementation in the Z Object Publishing Environment (Zope) allows remote malicious users to conduct unauthorized activities.
Zope Zope 1.10.3
Zope Zope 2.1.1
9.3
CVSSv2
CVE-2011-3587
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x up to and including 4.0.9, 4.1, and 4.2 up to and including 4.2a2, allows remote malicious users to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python mod...
Zope Zope 2.12.9
Zope Zope 2.12.13
Zope Zope 2.12.2
Zope Zope 2.12.0
Zope Zope 2.12.17
Zope Zope 2.12.15
Zope Zope 2.13.0
Zope Zope 2.13.1
Plone Plone 4.0.8
Plone Plone 4.0.1
Plone Plone 4.1
Plone Plone 4.2
Zope Zope 2.12.12
Zope Zope 2.12.14
Zope Zope 2.12.18
Zope Zope 2.12.6
Zope Zope 2.13.2
Zope Zope 2.12.19
Zope Zope 2.12.20
Plone Plone 4.0.3
Plone Plone 4.0.2
Plone Plone 4.2a2
1 EDB exploit
7.5
CVSSv2
CVE-2011-2528
Unspecified vulnerability in (1) Zope 2.12.x prior to 2.12.19 and 2.13.x prior to 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows malicious users to gain privileges via unspecified vectors, related to a "highly serious vulner...
Plone Plone Hotfix 20110720
Plone Plone 3.1.4
Plone Plone 3.1.3
Plone Plone 3.1.2
Plone Plone 3.1.1
Plone Plone 3.1
Plone Plone 3.0.3
Plone Plone 3.0.4
Plone Plone 3.0.5
Plone Plone 3.0
Plone Plone 3.1.6
Plone Plone 3.0.6
Plone Plone 3.3.1
Plone Plone 3.3.5
Plone Plone 3.3.4
Plone Plone 3.0.2
Plone Plone 3.3.6
Plone Plone 3.2.3
Plone Plone 3.2.2
Plone Plone 3.2.1
Plone Plone 3.2
Plone Plone 3.1.5.1
7.5
CVSSv2
CVE-2010-2944
The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote malicious users to gain privileges.
Jens Vagelpohl Zope-ldapuserfolder 2.9-1
7.5
CVSSv2
CVE-2009-0669
Zope Object Database (ZODB) prior to 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote malicious users to bypass authentication via vectors involving the ZEO network protocol.
Zope Zodb
Zope Zodb 3.8.0
Zope Zodb 3.8
7.5
CVSSv2
CVE-2007-5741
Plone 2.5 up to and including 2.5.4 and 3.0 up to and including 3.0.2 allows remote malicious users to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Plone Plone 2.5
Plone Plone 2.5.1
Plone Plone 2.5 Beta1
Plone Plone 3.0
Plone Plone 3.0.1
Plone Plone 3.0.2
Plone Plone 2.5.1 Rc
Plone Plone 2.5.4
7.5
CVSSv2
CVE-2005-3323
docutils in Zope 2.6, 2.7 prior to 2.7.8, and 2.8 prior to 2.8.2 allows remote malicious users to include arbitrary files via include directives in RestructuredText functionality.
Zope Zope 2.6
Zope Zope
Debian Debian Linux 3.1
Debian Debian Linux 3.0
7.5
CVSSv2
CVE-2002-0688
ZCatalog plug-in index support capability for Zope 2.4.0 up to and including 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.
Zope Zope 2.5.1
Zope Zope 2.4.0
7.5
CVSSv2
CVE-2002-0170
Zope 2.2.0 up to and including 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Zope Zope 2.2.2
Zope Zope 2.2.3
Zope Zope 2.2.4
Zope Zope 2.4.1
Zope Zope 2.4.2
Zope Zope 2.3.1
Zope Zope 2.3.2
Zope Zope 2.5.0
Zope Zope 2.5.1b1
Zope Zope 2.2.5
Zope Zope 2.3.0
Zope Zope 2.4.3
Zope Zope 2.4.4b1
Zope Zope 2.2.0
Zope Zope 2.2.1
Zope Zope 2.3.3
Zope Zope 2.4.0
7.5
CVSSv2
CVE-2001-1227
Zope prior to 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Zope Zope 2.2.3
Zope Zope 2.2.4
Zope Zope 2.2.0
Zope Zope 2.2.1
Zope Zope 2.2.2
Zope Zope 2.2.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946
CVE-2024-30309
CVE-2024-4761
CVE-2024-30051
type confusion
memory leak
CVE-2024-30293
reflected XSS
CVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »