Search for packages
| purl | pkg:pypi/zope2@2.13.14 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2014-75
Aliases: CVE-2012-5507 GHSA-3qpr-7rmg-73v8 PYSEC-2014-49 |
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to … |
Vulnerable |
|
PYSEC-2014-76
Aliases: CVE-2012-6661 GHSA-48vv-2pmq-9fvv PYSEC-2014-51 |
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number … |
Vulnerable |
|
PYSEC-2014-73
Aliases: CVE-2012-5486 GHSA-77hv-8796-8ccp PYSEC-2014-28 |
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary … |
Vulnerable |
|
PYSEC-2006-7
Aliases: CVE-2006-3458 GHSA-jcjp-qqpq-pc54 |
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing … | There are no reported fixed by versions. |
|
PYSEC-2006-8
Aliases: CVE-2006-4684 GHSA-hm8g-jxjj-gfm3 |
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with … | There are no reported fixed by versions. |