Lucene search
K

91 matches found

Veracode
Veracode
added 2024/05/09 10:42 a.m.17 views

Authentication Bypass

Zope Object Database ZODB Authentication Bypass. The vulnerability is due to certain configurations of Zope Enterprise Objects ZEO database sharing, which can be exploited by remote attackers via vectors involving the ZEO network protocol...

7.5CVSS6.7AI score0.00651EPSS
Exploits0References9Affected Software1
Veracode
Veracode
added 2024/05/03 8:3 a.m.21 views

Denial Of Service (DoS)

Zope Object Database ZODB is vulnerable to Denial Of Service DoS. The vulnerability is due to a flaw that allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, resulting in unexpected return values for the accept function...

4.3CVSS7.1AI score0.01038EPSS
Exploits0References10Affected Software1
OSV
OSV
added 2024/01/09 4:7 a.m.17 views

RLSA-2023:7732 Important: tracker-miners security update

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fixes: tracker-miners: sandbox escape CVE-2023-5557 For more details about the security issues, including th...

7.7CVSS7.7AI score0.00045EPSS
Exploits1References2
AlmaLinux
AlmaLinux
added 2023/12/11 12:0 a.m.34 views

Important: tracker-miners security update

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fixes: tracker-miners: sandbox escape CVE-2023-5557 For more details about the security issues, including th...

7.7CVSS7.3AI score0.00045EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/10/12 12:0 a.m.13 views

Fedora: Security Advisory for tracker-miners (FEDORA-2023-e8f45c67f5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.80301EPSS
Exploits1References2
Fedora
Fedora
added 2023/10/11 1:34 a.m.26 views

[SECURITY] Fedora 37 Update: tracker-miners-3.4.5-1.fc37

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker...

8.8CVSS6.5AI score0.80301EPSS
Exploits1
Fedora
Fedora
added 2023/08/25 12:43 a.m.47 views

[SECURITY] Fedora 37 Update: GitPython-3.1.32-1.fc37

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

9.8CVSS9.2AI score0.68859EPSS
Exploits1
Fedora
Fedora
added 2023/08/22 5:17 p.m.38 views

[SECURITY] Fedora 38 Update: GitPython-3.1.32-1.fc38

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

9.8CVSS9.2AI score0.68859EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.2 views

SUSE CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

6.5CVSS7.8AI score0.0064EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.1 views

SUSE CVE-2009-0669

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

7.5CVSS7.2AI score0.00651EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:3 a.m.3 views

SUSE CVE-2009-2701

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

6CVSS6.9AI score0.00419EPSS
Exploits0References3
Rockylinux
Rockylinux
added 2023/01/23 2:30 p.m.12 views

tracker bug fix update

An update is available for tracker. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tracker is a powerful desktop-neutral first class object database, tag and...

0.8AI score
Exploits0
Fedora
Fedora
added 2023/01/07 1:14 a.m.34 views

[SECURITY] Fedora 36 Update: GitPython-3.1.30-1.fc36

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

9.8CVSS9.2AI score0.68859EPSS
Exploits1
Fedora
Fedora
added 2023/01/04 1:25 a.m.31 views

[SECURITY] Fedora 37 Update: GitPython-3.1.30-1.fc37

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

9.8CVSS9.2AI score0.68859EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/05/17 5:44 a.m.41 views

Zope Object Database Denial of Service vulnerability

Race condition in ZEO/StorageServer.py in Zope Object Database ZODB before 3.10.0a2 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an...

4.3CVSS7.4AI score0.01038EPSS
Exploits0References15Affected Software1
OSV
OSV
added 2022/05/17 5:44 a.m.5 views

GHSA-J6M4-FRXH-P4X8 Zope Object Database Denial of Service vulnerability

Race condition in ZEO/StorageServer.py in Zope Object Database ZODB before 3.10.0a2 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an...

4.3CVSS6.4AI score0.01038EPSS
Exploits0References14
Github Security Blog
Github Security Blog
added 2022/05/02 3:37 a.m.22 views

Zope Object Database (ZODB) Arbitrary files reading and deletion

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

6CVSS6.8AI score0.00419EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/02 3:37 a.m.17 views

GHSA-M52M-2QPX-9J4J Zope Object Database (ZODB) Arbitrary files reading and deletion

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

9.8CVSS6.1AI score0.00419EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/02 3:17 a.m.22 views

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

7.5CVSS7AI score0.00651EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/02 3:17 a.m.12 views

GHSA-5432-C996-HVHJ Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

8.7CVSS6.4AI score0.00651EPSS
Exploits0References6
Rows per page
Query Builder