Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

Zope

pypi

Zope application server / web framework

View on github.com · View on pypi.org

Security Advisories for Zope in pypi

Moderate
almost 2 years ago

Access control vulnerable to user data deletion by anonynmous users GSA_kwCzR0hTQS1nNXZ3LTNoNjUtMnEzds4ABA9F

pypi Zope, AccessControl
Low
about 3 years ago

Zope management interface vulnerable to stored cross site scripting via the title property GSA_kwCzR0hTQS1tNzU1LWd4eGctcjVxaM4AA2Pw

pypi Zope
Low
about 3 years ago

Zope vulnerable to Stored Cross Site Scripting with SVG images GSA_kwCzR0hTQS13bThxLTk5NzUteGg1ds4AA1_u

pypi Zope
Moderate
about 3 years ago

Information disclosure in AccessControl GSA_kwCzR0hTQS04eHY3LTg5dmotcTQ4Y84AA1v6

pypi Zope, AccessControl
High
over 4 years ago

Zope Denial of Service (DoS) vulnerability in ZServer GSA_kwCzR0hTQS1xaDRxLWZ3ZjgtcXFyd84AAgJY

pypi Zope
Potential
High
over 4 years ago

Zope Command Execution Vulnerability GSA_kwCzR0hTQS04dzQ4LW02aHgtcmp3Ms4AAf4M

pypi zope2
Moderate
over 4 years ago

Zope DocumentTemplate package allows unauthenticated write GSA_kwCzR0hTQS1qNWNjLTNoNnItanFoNM3YcA

pypi zope
Potential
Moderate
over 4 years ago

Zope Cross-site scripting (XSS) vulnerability in ZMI pages GSA_kwCzR0hTQS01cjR4LXFjN3EtdmoyN83SHQ

pypi Zope2
Moderate
over 4 years ago

Zope Server vulnerable to DoS via header injection GSA_kwCzR0hTQS12d3JjLWc5cTYtZjY3Nc1jmg

pypi zope
High
over 4 years ago

ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions GSA_kwCzR0hTQS03OTQ0LWg1cnctcW1qeM1jgQ

pypi zope
High
over 4 years ago

Zope does not properly verify the access for objects with proxy roles GSA_kwCzR0hTQS1jM3JwLTRjamgtY3AzOM1h4g

pypi zope
Moderate
over 4 years ago

Zope allows attackers to modify raw image and file data GSA_kwCzR0hTQS03d2hyLWo4dmYtcjR3as1boA

pypi zope
High
over 4 years ago

Zope does not properly perform security registration for legacy names GSA_kwCzR0hTQS1oMnhoLWp2cGYteHE0Ms1bog

pypi zope
High
over 4 years ago

Zope does not properly restrict access to the getRoles method GSA_kwCzR0hTQS05Y21xLXBqNnAtaGd3Zs1Zrw

pypi zope
High
over 4 years ago

Zope DTML implementation Improper Authentication GSA_kwCzR0hTQS13Y3dwLXIzZmotbW0zcM1XWA

pypi zope
Moderate
over 4 years ago

Zope XSS Vulnerability GSA_kwCzR0hTQS12aDZnLTc4NmYtaHh4cM0_YA

pypi zope2, zope
Moderate
about 5 years ago

Remote Code Execution via unsafe classes in otherwise permitted modules MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFjeDktajUzZy1jY2dm

pypi zope, AccessControl
High
about 5 years ago

Remote Code Execution via Script (Python) objects under Python 3 MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0Z3EtajRwMi1qOGZy

pypi Zope
High
over 5 years ago

Remote Code Execution via traversal in TAL expressions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwcjktdjIzNC1qdzM2

pypi Zope
High
over 5 years ago

Remote Code Execution via traversal in TAL expressions MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJwY2ctZjlxNi0ybXE2

pypi Zope

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

High 10 Moderate 8 Low 2