Rezultati pretraživanja za 'Proizvođač: zope'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-0170 | 7.5 | Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration. | 2016-10-18 02:16:00 | 2002-04-22 04:00:00 |
| CVE-2012-6661 | 5.0 | Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT fr | 2014-11-05 03:32:00 | 2014-11-03 22:55:00 |
| CVE-2012-5507 | 4.3 | AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation. | 2014-10-02 18:25:00 | 2014-09-30 14:55:00 |
| CVE-2012-5489 | 6.5 | The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified | 2014-10-02 17:54:00 | 2014-09-30 14:55:00 |
| CVE-2011-3587 | 9.3 | Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python mod | 2011-10-21 02:56:00 | 2011-10-10 10:55:00 |
| CVE-2011-2528 | 7.5 | Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly | 2011-07-25 04:00:00 | 2011-07-19 20:55:00 |
| CVE-2006-4684 | 5.0 | The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulne | 2011-03-08 02:41:00 | 2006-09-19 18:07:00 |
| CVE-2010-3495 | 4.3 | Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function hav | 2011-01-22 06:43:00 | 2010-10-19 20:00:00 |
| CVE-2010-3198 | 4.3 | ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions. | 2010-09-10 04:00:00 | 2010-09-08 20:00:00 |
| CVE-2009-2701 | 6.0 | Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authen | 2009-09-09 04:00:00 | 2009-09-08 18:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: