zope vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-51734MediumAccessControl: Access control vulnerable to user data deletion by anonynmous users CVE-2023-44389LowZope: Zope management interface vulnerable to stored cross site scripting via the title property CVE-2023-42458LowZope: Zope vulnerable to Stored Cross Site Scripting with SVG images CVE-2023-41050MediumAccessControl: Information disclosure in AccessControl CVE-2010-3198HighZope: Zope Denial of Service (DoS) vulnerability in ZServer CVE-2000-0483Mediumzope: Zope DocumentTemplate package allows unauthenticated write CVE-2002-0687Mediumzope: Zope Server vulnerable to DoS via header injection CVE-2002-0688Highzope: ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions CVE-2002-0170Highzope: Zope does not properly verify the access for objects with proxy roles CVE-2000-1211Highzope: Zope does not properly perform security registration for legacy names CVE-2000-1212Mediumzope: Zope allows attackers to modify raw image and file data CVE-2000-0725Highzope: Zope does not properly restrict access to the getRoles method CVE-2000-0062Highzope: Zope DTML implementation Improper Authentication CVE-2011-4924Mediumzope: Zope XSS Vulnerability CVE-2021-32807MediumAccessControl: Remote Code Execution via unsafe classes in otherwise permitted modules CVE-2021-32811HighZope: Remote Code Execution via Script (Python) objects under Python 3 CVE-2021-32633HighZope: Remote Code Execution via traversal in TAL expressions CVE-2021-32674HighZope: Remote Code Execution via traversal in TAL expressions

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo