Search for packages
| purl | pkg:pypi/zope2@2.12.12 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2014-75
Aliases: CVE-2012-5507 GHSA-3qpr-7rmg-73v8 PYSEC-2014-49 |
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to … |
Vulnerable |
|
PYSEC-2014-76
Aliases: CVE-2012-6661 GHSA-48vv-2pmq-9fvv PYSEC-2014-51 |
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number … |
Vulnerable |
|
PYSEC-2014-73
Aliases: CVE-2012-5486 GHSA-77hv-8796-8ccp PYSEC-2014-28 |
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary … |
Vulnerable |
|
PYSEC-2014-74
Aliases: CVE-2012-5489 GHSA-879r-7f3w-8jj3 PYSEC-2014-31 |
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 2.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before … |
Vulnerable Vulnerable |
|
PYSEC-2006-7
Aliases: CVE-2006-3458 GHSA-jcjp-qqpq-pc54 |
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing … | There are no reported fixed by versions. |
|
PYSEC-2006-8
Aliases: CVE-2006-4684 GHSA-hm8g-jxjj-gfm3 |
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with … | There are no reported fixed by versions. |
|
PYSEC-2026-764
Aliases: CVE-2011-2528 GHSA-p6h9-hpcg-c6gm PYSEC-2011-25 |
High severity vulnerability that affects Plone and Zope2 Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, … |
Vulnerable Vulnerable |
|
PYSEC-2026-1067
Aliases: CVE-2011-3587 GHSA-8w48-m6hx-rjw2 |
Zope Command Execution Vulnerability Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and … |
Vulnerable Vulnerable |
|
PYSEC-2026-766
Aliases: CVE-2011-4924 GHSA-vh6g-786f-hxxp PYSEC-2026-3440 |
Zope XSS Vulnerability Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before … |
Vulnerable Vulnerable |