Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

plone plone 4.0.6.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4030
The CMFEditions component 2.x in Plone 4.0.x up to and including 4.0.9, 4.1, and 4.2 up to and including 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote malicious users to access sub-objects via unspecified vectors, a different vulner...
Plone Cmfeditions 2.0b6Plone Cmfeditions 2.0b7Plone Cmfeditions 2.0b8Plone Plone 4.0.4Plone Plone 4.0.6.1Plone Plone 4.2a1Plone Cmfeditions 2.0a1Plone Cmfeditions 2.0b1Plone Cmfeditions 2.0b9Plone Plone 4.0.1Plone Plone 4.0.7Plone Plone 4.0.9Plone Cmfeditions 2.0b4Plone Cmfeditions 2.0b5Plone Plone 4.0.5Plone Plone 4.0Plone Plone 4.2a2Plone Plone 4.2Plone Cmfeditions 2.0b2Plone Cmfeditions 2.0b3Plone Plone 4.0.3Plone Plone 4.0.2
6.8
CVSSv3
CVE-2015-7317
Kupu 3.3.0 up to and including 3.3.6, 4.0.0 up to and including 4.0.10, 4.1.0 up to and including 4.1.6, and 4.2.0 up to and including 4.2.7 allows remote authenticated users to edit Kupu settings.
Kupu Project KupuPlone Plone 4.2Plone Plone 4.2.2Plone Plone 4.1.1Plone Plone 4.1.3Plone Plone 4.0.3Plone Plone 4.0.5Plone Plone 4.0.10Plone Plone 3.3.1Plone Plone 4.1.4Plone Plone 4.1.5Plone Plone 4.1.6Plone Plone 4.0Plone Plone 4.0.1Plone Plone 3.3.3Plone Plone 3.3.4Plone Plone 3.3.5Plone Plone 3.3.6Plone Plone 4.2.4Plone Plone 4.2.5Plone Plone 4.2.6Plone Plone 4.2.7
NA
CVE-2011-1949
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 up to and including 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
Plone Plone 2.1.2Plone Plone 2.5.2Plone Plone 2.5.3Plone Plone 3.1.6Plone Plone 3.1.5.1Plone Plone 3.3.1Plone Plone 3.3Plone Plone 3.3.3Plone Plone 3.3.4Plone Plone 2.5.4Plone Plone 4.0.4Plone Plone 4.0.5Plone Plone 2.1.4Plone Plone 2.1.3Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.1.4Plone Plone 3.1.3Plone Plone 3.2.3Plone Plone 3.2.2Plone Plone 2.5.5
NA
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 treats URLs starting with a space as a relative URL, which allows remote malicious users to bypass the allow_ex...
Plone Plone 3.3Plone Plone 4.0.5Plone Plone 3.0.1Plone Plone 3.0Plone Plone 3.2.3Plone Plone 3.1.4Plone Plone 3.1.5.1Plone Plone 2.1.4Plone Plone 4.0.2Plone Plone 3.3.5Plone Plone 3.0.6Plone Plone 3.2Plone Plone 3.1.1Plone Plone 2.1.1Plone Plone 3.3.4Plone Plone 3.3.2Plone Plone 4.0.4Plone Plone 3.1.7Plone Plone 4.1Plone Plone 3.2.2Plone Plone 2.1.2Plone Plone 3.0.3
NA
CVE-2013-4188
traverser.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to &...
Plone Plone 4.3.1Plone Plone 4.3Plone Plone 4.0.3Plone Plone 4.0.5Plone Plone 4.1Plone Plone 3.0.4Plone Plone 3.0.6Plone Plone 3.1.6Plone Plone 3.2Plone Plone 3.3.3Plone Plone 3.3.5Plone Plone 2.5.4Plone Plone 2.1Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.0.3Plone Plone 3.2.1Plone Plone 3.2.2Plone Plone 3.2.3Plone Plone 3.3Plone Plone 3.3.1
NA
CVE-2013-4191
zip.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote malicious users to obtain sensitive information by reading ...
Plone Plone 4.3Plone Plone 4.3.1Plone Plone 4.2.1Plone Plone 4.2.2Plone Plone 4.2.3Plone Plone 4.2.4Plone Plone 4.2.5Plone Plone 4.2Plone Plone 4.0.1Plone Plone 3.0Plone Plone 3.0.2Plone Plone 3.1Plone Plone 3.1.2Plone Plone 3.2.1Plone Plone 3.2.3Plone Plone 2.5Plone Plone 2.5.2Plone Plone 2.1.1Plone Plone 2.1.3Plone Plone 4.0.3Plone Plone 4.0.4Plone Plone 4.0.5
NA
CVE-2013-4193
typeswidget.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 does not properly enforce the immutable setting on unspecified content edit forms, which allows remote malicious users to hide fields on the forms via a craft...
Plone Plone 4.0.1Plone Plone 3.0Plone Plone 3.0.2Plone Plone 3.1.2Plone Plone 3.1.4Plone Plone 3.2.1Plone Plone 3.2.3Plone Plone 2.5Plone Plone 2.5.2Plone Plone 2.1.3Plone Plone 4.0.3Plone Plone 4.0.4Plone Plone 4.0.5Plone Plone 4.0.6.1Plone Plone 3.1.5.1Plone Plone 3.1.6Plone Plone 3.1.7Plone Plone 3.2Plone Plone 2.5.3Plone Plone 2.5.4Plone Plone 2.5.5Plone Plone 2.1
NA
CVE-2013-4195
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allow remote malicious users to redirect users to arbitrary web...
Plone Plone 4.0Plone Plone 4.1Plone Plone 3.0.1Plone Plone 3.0.6Plone Plone 3.1.1Plone Plone 3.2Plone Plone 3.2.2Plone Plone 3.3.5Plone Plone 2.5.1Plone Plone 2.1Plone Plone 2.1.2Plone Plone 3.0.2Plone Plone 3.0.3Plone Plone 3.0.4Plone Plone 3.0.5Plone Plone 3.3Plone Plone 3.3.1Plone Plone 3.3.2Plone Plone 3.3.3Plone Plone 2.1.4Plone Plone 4.0.2Plone Plone 4.0.3
NA
CVE-2013-4196
The object manager implementation (objectmanager.py) in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 does not properly restrict access to internal methods, which allows remote malicious users to obtain sensitive informati...
Plone Plone 4.3Plone Plone 4.3.1Plone Plone 4.0.1Plone Plone 4.0.6.1Plone Plone 3.0Plone Plone 3.0.2Plone Plone 3.1Plone Plone 3.1.2Plone Plone 3.2.1Plone Plone 3.2.3Plone Plone 3.3.4Plone Plone 2.5Plone Plone 2.5.2Plone Plone 2.1.1Plone Plone 2.1.3Plone Plone 4.0.2Plone Plone 4.0.3Plone Plone 4.0.4Plone Plone 4.0.5Plone Plone 3.1.4Plone Plone 3.1.5.1Plone Plone 3.1.6
NA
CVE-2013-4197
member_portrait.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.
Plone Plone 4.2.4Plone Plone 4.2Plone Plone 4.2.1Plone Plone 4.2.2Plone Plone 4.2.3Plone Plone 4.2.5Plone Plone 4.3.1Plone Plone 4.3Plone Plone 4.0.3Plone Plone 4.0.5Plone Plone 3.0.4Plone Plone 3.0.6Plone Plone 4.1Plone Plone 3.0Plone Plone 3.0.1Plone Plone 3.0.2Plone Plone 3.2.1Plone Plone 3.2.2Plone Plone 3.2.3Plone Plone 3.3Plone Plone 2.1.1Plone Plone 2.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook