Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up
zope

zope3

6 Versions 1 CVE

Versions

3.1.1through 3.4.1

OTHER 1 CVE

and 2.12.x before 2.12.3

OTHER 1 CVE

2.9.x before 2.9.12

OTHER 1 CVE

2.11.x before 2.11.6

OTHER 1 CVE

2.10.x before 2.10.11

OTHER 1 CVE

2.8.x before 2.8.12

OTHER 1 CVE

Recent CVEs

CVE-2011-4924

Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform sanitization. NOTE: this issue exists because of an incomplete fix for CVE-2010-1104

UNKNOWN Nov 25, 2019