Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
plone plone 3.0 vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2007-5741
Plone 2.5 up to and including 2.5.4 and 3.0 up to and including 3.0.2 allows remote malicious users to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Plone Plone 2.5
Plone Plone 2.5.1
Plone Plone 2.5 Beta1
Plone Plone 3.0
Plone Plone 3.0.1
Plone Plone 3.0.2
Plone Plone 2.5.1 Rc
Plone Plone 2.5.4
383
VMScore
CVE-2008-4571
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone prior to 3.0.4 allows remote malicious users to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.
Plone Plone 2.5.1
Plone Plone 2.5 Beta1
Plone Plone 2.0.5
Plone Plone 3.0
Plone Plone 2.5
Plone Plone 2.1.2
Plone Plone 2.5.4
Plone Plone 2.5.1 Rc
Plone Plone 3.0.1
Plone Plone 3.0.2
Plone Plone
534
VMScore
CVE-2009-0662
The PlonePAS product 3.x prior to 3.9 and 3.2.x prior to 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.
Plone Plonepas 3.5
Plone Plonepas 3.4
Plone Plonepas 3.0
Plone Plonepas 3.1
Plone Plonepas 3.3
Plone Plonepas 3.2
668
VMScore
CVE-2011-0720
Unspecified vulnerability in Plone 2.5 up to and including 4.0, as used in Conga, luci, and possibly other products, allows remote malicious users to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Plone Plone 3.0.2
Plone Plone 3.0.1
Plone Plone 3.1.1
Plone Plone 3.1.6
Plone Plone 3.3.1
Plone Plone 3.0.4
Plone Plone 2.5.1
Plone Plone 3.3.5
Plone Plone 3.0.6
Plone Plone 3.1.3
Plone Plone 3.2
Plone Plone 3.1.5.1
Plone Plone 3.3.3
Plone Plone 3.0
Plone Plone 2.5
Plone Plone 4.0
Plone Plone 3.0.3
Plone Plone 2.5.4
Plone Plone 3.0.5
Plone Plone 3.1
Plone Plone 3.2.2
Plone Plone 3.3
383
VMScore
CVE-2010-2422
Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 up to and including 3.3.4 before hotfix 20100612 allows remote malicious users to inject arbitrary web script or HTML via the safe_html transform.
Plone Plone 2.1
Plone Plone 2.5
Plone Plone 2.5.2
Plone Plone 3.0.3
Plone Plone 3.0.5
Plone Plone 3.1.5.1
Plone Plone 3.1.7
Plone Plone 3.3
Plone Plone 3.3.2
Plone Plone 2.1.1
Plone Plone 2.1.2
Plone Plone 2.1.3
Plone Plone 2.1.4
Plone Plone 3.0.6
Plone Plone 3.1
Plone Plone 3.1.1
Plone Plone 3.1.2
Plone Plone 3.1.3
Plone Plone 3.3.4
Plone Plone 3.3.5
Plone Plone 2.5.4
Plone Plone 2.5.5
312
VMScore
CVE-2011-1949
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 up to and including 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
Plone Plone 2.1.2
Plone Plone 2.5.2
Plone Plone 2.5.3
Plone Plone 3.1.6
Plone Plone 3.1.5.1
Plone Plone 3.3.1
Plone Plone 3.3
Plone Plone 3.3.3
Plone Plone 3.3.4
Plone Plone 2.5.4
Plone Plone 4.0.4
Plone Plone 4.0.5
Plone Plone 2.1.4
Plone Plone 2.1.3
Plone Plone 3.0
Plone Plone 3.0.1
Plone Plone 3.0.2
Plone Plone 3.1.4
Plone Plone 3.1.3
Plone Plone 3.2.3
Plone Plone 3.2.2
Plone Plone 2.5.5
585
VMScore
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 treats URLs starting with a space as a relative URL, which allows remote malicious users to bypass the allow_ex...
Plone Plone 3.3
Plone Plone 4.0.5
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 3.2.3
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 2.1.4
Plone Plone 4.0.2
Plone Plone 3.3.5
Plone Plone 3.0.6
Plone Plone 3.2
Plone Plone 3.1.1
Plone Plone 2.1.1
Plone Plone 3.3.4
Plone Plone 3.3.2
Plone Plone 4.0.4
Plone Plone 3.1.7
Plone Plone 4.1
Plone Plone 3.2.2
Plone Plone 2.1.2
Plone Plone 3.0.3
1 EDB exploit
445
VMScore
CVE-2012-5496
kupu_spellcheck.py in Kupu in Plone prior to 4.0 allows remote malicious users to cause a denial of service (ZServer thread lock) via a crafted URL.
Plone Plone
Plone Plone 3.3.4
Plone Plone 3.3.3
Plone Plone 3.3.2
Plone Plone 3.1.1
Plone Plone 3.1
Plone Plone 3.0.6
Plone Plone 3.0.5
Plone Plone 3.0.4
Plone Plone 2.1.2
Plone Plone 2.1.1
Plone Plone 2.1
Plone Plone 3.3.1
Plone Plone 3.2.3
Plone Plone 3.1.4
Plone Plone 3.1.2
Plone Plone 3.0.2
Plone Plone 3.0
Plone Plone 2.5.1
Plone Plone 2.1.4
Plone Plone 2.0.3
Plone Plone 2.0.1
578
VMScore
CVE-2013-4189
Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allow remote authenticated users with administrator access to a subtree to acce...
Plone Plone 4.0.3
Plone Plone 4.0.5
Plone Plone 3.0.2
Plone Plone 3.0.4
Plone Plone 3.1.4
Plone Plone 3.1.6
Plone Plone 3.3.1
Plone Plone 3.3.3
Plone Plone 2.5.2
Plone Plone 2.5.4
Plone Plone 4.0.6.1
Plone Plone 4.1
Plone Plone 3.0
Plone Plone 3.0.1
Plone Plone 3.2
Plone Plone 3.2.1
Plone Plone 3.2.2
Plone Plone 3.2.3
Plone Plone 2.1
Plone Plone 2.1.1
Plone Plone 2.1.2
Plone Plone 2.1.3
516
VMScore
CVE-2013-4191
zip.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote malicious users to obtain sensitive information by reading ...
Plone Plone 4.3
Plone Plone 4.3.1
Plone Plone 4.2.1
Plone Plone 4.2.2
Plone Plone 4.2.3
Plone Plone 4.2.4
Plone Plone 4.2.5
Plone Plone 4.2
Plone Plone 4.0.1
Plone Plone 3.0
Plone Plone 3.0.2
Plone Plone 3.1
Plone Plone 3.1.2
Plone Plone 3.2.1
Plone Plone 3.2.3
Plone Plone 2.5
Plone Plone 2.5.2
Plone Plone 2.1.1
Plone Plone 2.1.3
Plone Plone 4.0.3
Plone Plone 4.0.4
Plone Plone 4.0.5
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946
CVE-2024-30309
CVE-2024-4761
CVE-2024-30051
type confusion
memory leak
CVE-2024-30293
reflected XSS
CVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »