Debian DSA-1863-1 : zope2.10/zope2.9 - several vulnerabilities

Several remote vulnerabilities have been discovered in the zope, a feature-rich web application server written in python, that could lead to arbitrary code execution in the worst case. The Common Vulnerabilities and Exposures project identified the following problems : - CVE-2009-0668 Due to a...

Zope XSS Vulnerability (Jan 2010)

Zope is prone to a cross-site scripting XSS vulnerability because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Zope 'standard_error_message' Cross-Site Scripting Vulnerability

Zope is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...

Zope 'standard_error_message' Cross-Site Scripting Vulnerability

Binary data 5301.prm...

zope 2.2.4 DTML权限提升漏洞

No description provided by source...

zope 2.5.1 XML-PRC 请求导致信息泄漏

No description provided by source...

zope 2.6.1 html 注入漏洞

No description provided by source...

zope 2.7.0 多漏洞导致跨站脚本漏洞

No description provided by source...

zope 2.6.1 addItems脚本信息泄漏

No description provided by source...

zope 2.6.1 无效查询导致信息泄漏

No description provided by source...

zope 2.2 DTML模板和DTML方法远程修改漏洞

No description provided by source...

zope 2.2.4 ZClass修改导致DOS漏洞

No description provided by source...

zope 2.3.2 ZClass 权限提升漏洞

No description provided by source...

Ubuntu: Security Advisory (USN-848-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-848-1 (zope3)

The remote host is missing an update to zope3 announced via advisory USN-848-1. OpenVAS Vulnerability Test $Id: ubuntu8481.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8481.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-848-1 zope3 Authors: Thomas Reinke...

USN-848-1: Zope vulnerabilities

It was discovered that the Zope Object Database ZODB database server ZEO improperly filtered certain commands when a database is shared among multiple applications or application instances. A remote attacker could send malicious commands to the server and execute arbitrary code. CVE-2009-0668 It...

PYSEC-2009-10

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

Design/Logic Flaw

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

CVE-2009-2701

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

CVE-2009-2701

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...