Filtered by vendor Ez Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-1565 1 Ez 1 Ez Publish 2024-08-06 N/A
Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference.
CVE-2019-12139 1 Ez 2 Ezplatform-admin-ui, Ezplatform-page-builder 2024-08-04 N/A
An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and 1.4.x before 1.4.4, and ezplatform-page-builder 1.1.x before 1.1.5 and 1.2.x before 1.2.4.
CVE-2020-10806 1 Ez 2 Ez Publish-kernel, Ez Publish-legacy 2024-08-04 9.8 Critical
eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.