Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

plone plone 4.0.5 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2011-4030
The CMFEditions component 2.x in Plone 4.0.x up to and including 4.0.9, 4.1, and 4.2 up to and including 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote malicious users to access sub-objects via unspecified vectors, a different vulner...
Plone Cmfeditions 2.0b6Plone Cmfeditions 2.0b7Plone Cmfeditions 2.0b8Plone Plone 4.0.4Plone Plone 4.0.6.1Plone Plone 4.2a1Plone Cmfeditions 2.0a1Plone Cmfeditions 2.0b1Plone Cmfeditions 2.0b9Plone Plone 4.0.1Plone Plone 4.0.7Plone Plone 4.0.9Plone Cmfeditions 2.0b4Plone Cmfeditions 2.0b5Plone Plone 4.0.5Plone Plone 4.0Plone Plone 4.2a2Plone Plone 4.2Plone Cmfeditions 2.0b2Plone Cmfeditions 2.0b3Plone Plone 4.0.3Plone Plone 4.0.2
5
CVSSv2
CVE-2013-7060
Products/CMFPlone/FactoryTool.py in Plone 3.3 up to and including 4.3.2 allows remote malicious users to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope.
Plone Plone 4.0.5Plone Plone 4.0.4Plone Plone 4.0.3Plone Plone 4.0.2Plone Plone 4.2.1Plone Plone 4.2.2Plone Plone 4.2.3Plone Plone 4.2.4Plone Plone 4.1.4Plone Plone 4.1.5Plone Plone 3.3.4Plone Plone 3.3.3Plone Plone 3.3.2Plone Plone 3.3.1Plone Plone 4.1Plone Plone 4.3.1Plone Plone 4.3.2Plone Plone 4.1.6Plone Plone 4.0.9Plone Plone 4.0Plone Plone 3.3.5Plone Plone 4.1.2
4.9
CVSSv2
CVE-2015-7317
Kupu 3.3.0 up to and including 3.3.6, 4.0.0 up to and including 4.0.10, 4.1.0 up to and including 4.1.6, and 4.2.0 up to and including 4.2.7 allows remote authenticated users to edit Kupu settings.
Kupu Project KupuPlone Plone 4.2Plone Plone 4.2.2Plone Plone 4.1.1Plone Plone 4.1.3Plone Plone 4.0.3Plone Plone 4.0.5Plone Plone 4.0.10Plone Plone 3.3.1Plone Plone 4.1.4Plone Plone 4.1.5Plone Plone 4.1.6Plone Plone 4.0Plone Plone 4.0.1Plone Plone 3.3.3Plone Plone 3.3.4Plone Plone 3.3.5Plone Plone 3.3.6Plone Plone 4.2.4Plone Plone 4.2.5Plone Plone 4.2.6Plone Plone 4.2.7
5.5
CVSSv2
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 up to and including 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Plone Plone 4.1.6Plone Plone 3.3Plone Plone 4.0.9Plone Plone 4.0.7Plone Plone 4.1Plone Plone 4.1.1Plone Plone 4.1.2Plone Plone 4.1.3Plone Plone 4.0.1Plone Plone 4.0Plone Plone 3.3.6Plone Plone 3.3.5Plone Plone 4.2.5Plone Plone 4.2.6Plone Plone 4.2.7Plone Plone 4.3Plone Plone 4.1.4Plone Plone 4.0.4Plone Plone 4.0.2Plone Plone 3.3.4Plone Plone 3.3.2Plone Plone 4.2.1
7.5
CVSSv2
CVE-2016-4041
Plone 4.0 up to and including 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote malicious users to gain webdav access via unspecified vectors.
Plone Plone 5.0Plone Plone 5.0.4Plone Plone 4.3.9Plone Plone 4.3.7Plone Plone 4.3Plone Plone 4.2.6Plone Plone 4.2.1Plone Plone 4.1.6Plone Plone 4.1.4Plone Plone 4.0.10Plone Plone 4.0.8Plone Plone 4.0Plone Plone 5.0.3Plone Plone 5.0.2Plone Plone 5.0.1Plone Plone 4.2.5Plone Plone 4.2.4Plone Plone 4.2.3Plone Plone 4.2.2Plone Plone 4.0.5Plone Plone 4.0.4Plone Plone 4.0.3
4.3
CVSSv2
CVE-2015-7315
Plone 3.3.0 up to and including 3.3.6, 4.0.0 up to and including 4.0.10, 4.1.0 up to and including 4.1.6, 4.2.0 up to and including 4.2.7, 4.3.0 up to and including 4.3.6, and 5.0rc1 allows remote malicious users to add a new member to a Plone site with registration enabled, with...
Plone Plone 4.2.2Plone Plone 4.2.3Plone Plone 4.2.4Plone Plone 4.2.5Plone Plone 4.0.5Plone Plone 4.0.7Plone Plone 4.0.8Plone Plone 4.0.9Plone Plone 4.0Plone Plone 5.0Plone Plone 4.3.4Plone Plone 4.3.6Plone Plone 4.2.7Plone Plone 4.1.1Plone Plone 4.1.6Plone Plone 4.0.2Plone Plone 4.0.4Plone Plone 4.0.10Plone Plone 3.3.1Plone Plone 4.3Plone Plone 4.3.1Plone Plone 4.3.2
4.3
CVSSv2
CVE-2015-7316
Cross-site scripting (XSS) vulnerability in Plone 3.3.0 up to and including 3.3.6, 4.0.0 up to and including 4.0.10, 4.1.0 up to and including 4.1.6, 4.2.0 up to and including 4.2.7, 4.3.x prior to 4.3.7, and 5.0rc1.
Plone Plone 5.0Plone Plone 4.3Plone Plone 4.3.1Plone Plone 4.3.2Plone Plone 4.1.2Plone Plone 4.1.3Plone Plone 4.1.4Plone Plone 4.1.5Plone Plone 3.3.2Plone Plone 3.3.3Plone Plone 3.3.4Plone Plone 3.3.5Plone Plone 4.0Plone Plone 4.3.4Plone Plone 4.3.6Plone Plone 4.2.5Plone Plone 4.2.7Plone Plone 4.1.1Plone Plone 4.1.6Plone Plone 4.0.2Plone Plone 4.0.10Plone Plone 3.3.1
4
CVSSv2
CVE-2017-5524
Plone 4.x up to and including 4.3.11 and 5.x up to and including 5.0.6 allow remote malicious users to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method.
Plone Plone 5.0.2Plone Plone 4.3.11Plone Plone 4.3.4Plone Plone 4.3.2Plone Plone 4.2.3Plone Plone 4.2.1Plone Plone 4.1.5Plone Plone 5.0Plone Plone 4.1Plone Plone 4.0.9Plone Plone 4.0.1Plone Plone 4.3.9Plone Plone 4.3.8Plone Plone 4.3.7Plone Plone 4.3.6Plone Plone 4.2Plone Plone 4.1.6Plone Plone 5.1Plone Plone 4.0.7Plone Plone 4.0.5Plone Plone 4.0.4Plone Plone 4.0.3
3.5
CVSSv2
CVE-2011-1949
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 up to and including 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
Plone Plone 2.1.2Plone Plone 2.5.2Plone Plone 2.5.3Plone Plone 3.1.6Plone Plone 3.1.5.1Plone Plone 3.3.1Plone Plone 3.3Plone Plone 3.3.3Plone Plone 3.3.4Plone Plone 2.5.4Plone Plone 4.0.4Plone Plone 4.0.5Plone Plone 2.1.4Plone Plone 2.1.3Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.1.4Plone Plone 3.1.3Plone Plone 3.2.3Plone Plone 3.2.2Plone Plone 2.5.5
5
CVSSv2
CVE-2016-4042
Plone 3.3 up to and including 5.1a1 allows remote malicious users to obtain information about the ID of sensitive content via unspecified vectors.
Plone Plone 5.0Plone Plone 5.0.3Plone Plone 5.0.1Plone Plone 4.3.9Plone Plone 4.3.4Plone Plone 4.3.2Plone Plone 4.2.3Plone Plone 4.2.1Plone Plone 4.1.1Plone Plone 4.0.10Plone Plone 4.0.4Plone Plone 4.0.2Plone Plone 3.3.1Plone Plone 4.0Plone Plone 4.3.8Plone Plone 4.3.7Plone Plone 4.3.6Plone Plone 4.3.5Plone Plone 4.2Plone Plone 4.1.6Plone Plone 4.1.5Plone Plone 4.1.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook