Ez vulnerabilities

Products

• Publish 20

Newest

• ez publish-kernel, publish-legacy +1 more eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type CVE-2020-10806 Fix available 9.8 CriticalMarch 22, 2020
• ez ezplatform-admin-ui, ezplatform-page-builder +1 more ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability CVE-2019-12139 Fix available 6.1 MediumMay 16, 2019
• ez publish eZ Publish Cross-site Scripting (XSS) vulnerability CVE-2017-1000431 Fix available 6.1 MediumJanuary 2, 2018
• ez publish Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and... CVE-2012-1565 7.5 HighOctober 6, 2012
• ez ezjscore Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent... CVE-2012-1597 Public exploit 2.6 LowAugust 17, 2012
• ez publish Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4... CVE-2012-4053 6.8 MediumJuly 25, 2012
• ez publish Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers... CVE-2010-2672 7.5 HighJuly 8, 2010
• ez publish Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0... CVE-2010-2671 4.3 MediumJuly 8, 2010
• ez publish The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other... CVE-2008-6844 Public exploit 7.5 HighJuly 2, 2009
• ez publish The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access... CVE-2007-4494 5.0 MediumAugust 23, 2007
• ez publish eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module... CVE-2007-4493 10.0 HighAugust 23, 2007
• ez publish eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language,... CVE-2006-7219 4.0 MediumJuly 6, 2007
• ez publish eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when... CVE-2006-7218 4.0 MediumJuly 6, 2007
• ez publish Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers... CVE-2006-0938 4.3 MediumMarch 1, 2006
• ez publish eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows... CVE-2005-4857 4.0 MediumDecember 31, 2005
• ez publish The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8... CVE-2005-4856 5.0 MediumDecember 31, 2005
• ez publish Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7... CVE-2005-4855 3.5 LowDecember 31, 2005
• ez publish eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict... CVE-2005-4854 5.0 MediumDecember 31, 2005
• ez publish The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2,... CVE-2005-4853 9.4 HighDecember 31, 2005
• ez publish The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts... CVE-2005-4852 5.0 MediumDecember 31, 2005
• ez publish eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which... CVE-2005-4851 4.0 MediumDecember 31, 2005
• ez publish eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to... CVE-2005-4850 5.0 MediumDecember 31, 2005
• ez publish Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote... CVE-2003-0310 Public exploit 6.8 MediumMay 17, 2003