Rezultati pretraživanja za 'Proizvođač: zope'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21336 | 4.0 | Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the | 2022-06-03 12:54:00 | 2021-03-08 21:15:00 |
| CVE-2021-32633 | 6.5 | Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default, only users with the Manager role can add or edit | 2022-04-06 17:48:00 | 2021-05-21 14:15:00 |
| CVE-2021-32674 | 6.5 | Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Pytho | 2022-01-21 14:42:00 | 2021-06-08 18:15:00 |
| CVE-2021-45935 | 4.3 | Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco and std::__1::packaged_task<int). | 2022-01-11 18:54:00 | 2022-01-01 01:15:00 |
| CVE-2021-21360 | 5.0 | Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may vie | 2022-01-01 18:02:00 | 2021-03-09 01:15:00 |
| CVE-2021-21337 | 5.8 | Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functi | 2022-01-01 18:02:00 | 2021-03-08 21:15:00 |
| CVE-2021-36089 | 6.8 | Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from grk::FileFormatDecompress::applyColour). | 2021-07-06 21:04:00 | 2021-07-01 03:15:00 |
| CVE-2021-33507 | 4.3 | Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS. | 2021-05-27 21:36:00 | 2021-05-21 22:15:00 |
| CVE-2011-4924 | 4.3 | Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via | 2019-12-05 16:01:00 | 2019-11-25 18:15:00 |
| CVE-2006-3458 | 2.1 | Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files. | 2018-10-03 21:43:00 | 2006-07-07 23:05:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: