Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-0286

Malicious code in bioql PyPI...

4.8CVSS5AI score0.00372EPSS
Exploits0References5
PyPA
PyPA
added 2023/10/04 9:15 p.m.6 views

PYSEC-2023-193

Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface ZMI. All versions of Zope 4 and Zope 5 are affected. Patches will be released wit...

4.8CVSS7.1AI score0.00372EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2023/10/04 9:15 p.m.11 views

Design/Logic Flaw

Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface ZMI. All versions of Zope 4 and Zope 5 are affected. Patches will be released wit...

4.3CVSS5.1AI score0.00372EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/10/04 8:7 p.m.12 views

CVE-2023-44389 Zope management interface vulnerable to stored cross site scripting via the title property

Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface ZMI. All versions of Zope 4 and Zope 5 are affected. Patches will be released wit...

3.1CVSS5.4AI score0.00372EPSS
Exploits0References3
OSV
OSV
added 2023/10/04 6:50 p.m.26 views

GHSA-M755-GXXG-R5QH Zope management interface vulnerable to stored cross site scripting via the title property

Impact The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface ZMI because the title property is displayed unquoted in the breadcrumbs element. All versions of Zope 4 and Zope 5 are...

3.1CVSS4.5AI score0.00372EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.2 views

PT-2023-29223 · Zope · Zope

Name of the Vulnerable Software and Affected Versions: Zope versions prior to 4.8.11 Zope versions prior to 5.8.6 Description: Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the...

4.8CVSS5AI score0.00372EPSS
Exploits0References11
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.21 views

Foxit Reader XFA host title Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.8AI score0.00641EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2009/11/30 12:0 a.m.19 views

Microsoft Internet Explorer PDF Information Disclosure Vulnerability - Nov09

This host is installed with Internet Explorer and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiepdfinfodiscvulnnov09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer PDF Information Disclosure Vulnerability - Nov09 Authors: Sharat...

5CVSS6.7AI score0.26655EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2009/11/30 12:0 a.m.21 views

Microsoft Internet Explorer PDF Information Disclosure Vulnerability (Nov 2009)

Internet Explorer is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS5.1AI score0.26655EPSS
Exploits1References4
Rows per page
Query Builder