CVE-2022-25301

Prototype Pollution in jsgui-lang-essentials affects all versions, enabling an attacker to alter Object attributes (e.g., proto , constructor, prototype) via methods like ll_set. This can pollution prototypes and lead to DoS or remote code execution; remediation shows no fixed version for the pac...

CVE-2001-0568: Undefined Security Weakness

Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker Zope user with through-the-web scripting capabilities to alter ZClasses class attributes...