Rezultati pretraživanja za 'Proizvođač: zope'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2000-1212 | 5.0 | Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects. | 2026-09-23 10:10:00 | 2000-12-18 05:00:00 |
| CVE-2000-1211 | 7.5 | Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities. | 2026-09-23 10:10:00 | 2000-12-16 05:00:00 |
| CVE-2024-47532 | 6.5 | RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in | 2024-11-15 17:59:51 | 2024-09-30 16:15:09 |
| CVE-2024-24811 | 9.8 | SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are af | 2024-02-14 20:26:39 | 2024-02-07 15:15:08 |
| CVE-2023-44389 | 4.8 | Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface (ZMI). All versions of Zope 4 and | 2024-02-01 00:50:52 | 2023-10-04 21:15:10 |
| CVE-2000-0483 | 7.5 | The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. | 2023-11-07 01:55:00 | 2000-06-15 04:00:00 |
| CVE-2000-0062 | 10.0 | The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities. | 2023-11-07 01:55:00 | 2000-01-04 05:00:00 |
| CVE-2012-5486 | 6.4 | ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character. | 2023-02-13 04:36:00 | 2014-09-30 14:55:00 |
| CVE-2021-32807 | 6.5 | The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of `Script (Python)` objects. The policies | 2022-12-02 19:36:00 | 2021-07-30 22:15:00 |
| CVE-2021-32811 | 6.5 | Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope | 2022-12-02 19:35:00 | 2021-08-02 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: