Lucene search
+L

11 matches found

OSV
OSV
•added 2026/07/02 2:13 p.m.•14 views

PYSEC-2026-755 ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes...

7.5CVSS6.1AI score0.01439EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-1662

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.01439EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
•added 2022/04/30 6:19 p.m.•35 views

ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes...

7.5CVSS7.1AI score0.01439EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2022/04/30 6:19 p.m.•23 views

GHSA-7944-H5RW-QMJX ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes...

7.5CVSS6.6AI score0.01439EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2008/01/17 12:00 a.m.•34 views

Debian Security Advisory DSA 490-1 (zope)

The remote host is missing an update to zope announced via advisory DSA 490-1. OpenVAS Vulnerability Test $Id: deb4901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 490-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.5CVSS0.4AI score0.01439EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2008/01/17 12:00 a.m.•55 views

Debian: Security Advisory (DSA-490)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.01439EPSS
SaveExploits0References3
OSV
OSV
•added 2004/04/17 12:00 a.m.•31 views

DSA-490 zope - arbitrary code execution

Bulletin has no description...

7.5CVSS6.2AI score0.01439EPSS
SaveExploits0
Cvelist
Cvelist
•added 2003/04/02 5:00 a.m.•35 views

CVE-2002-0688

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes...

6.7AI score0.01439EPSS
SaveExploits0References5
CVE
CVE
•added 2003/04/02 5:00 a.m.•78 views

CVE-2002-0688

CVE-2002-0688 applies to the ZCatalog plug-in in Zope (versions 2.4.0–2.5.1). The flaw is a security-settings issue in ZCatalog that allows anonymous users and untrusted code to bypass access restrictions and invoke arbitrary methods of catalog indexes. Impact documented as remote access to catal...

7.5CVSS6.7AI score0.01439EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•4 views

CVE-2002-0688: Undefined Security Weakness

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes...

7.5CVSS5.9AI score0.01439EPSS
SaveExploits0References1
NVD
NVD
•added 2002/07/23 4:00 a.m.•27 views

CVE-2002-0688

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes...

7.5CVSS6.8AI score0.01439EPSS
SaveExploits0References5
Rows per page
Query Builder