Read the docs

zopefoundation

Records56All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

zopefoundation records in CISA KEV

No zopefoundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zope 36 records HIGH Zodb 4 records LOW Accesscontrol 3 records LOW Restrictedpython 3 records MEDIUM Products.pluggableauthservice 2 records LOW Grok 1 record LOW Products.cmfcore 1 record MEDIUM Products.genericsetup 1 record LOW

Records

4 records in Zodb · all components

TI-2009-00642 CVE-2009-0668 · GHSA-4x83-5gw5-q346

Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope…

Priority LOW 33

Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involvin…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02163 Published 2009-08-07 Fixed in 3.8.2 CWE-94
TI-2009-02583 CVE-2009-2701 · GHSA-m52m-2qpx-9j4j

Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server…

Priority LOW 29

Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00971 Published 2009-09-08 Fixed in 3.8.3, 3.9.0c2
TI-2010-03325 CVE-2010-3495 · GHSA-j6m4-frxh-p4x8

Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0…

Priority LOW 23

Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, lead…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01336 Published 2010-10-19 Fixed in 3.10.0a2 CWE-362
Open these records in search →