Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
plone plone 2.5.1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-5741
Plone 2.5 up to and including 2.5.4 and 3.0 up to and including 3.0.2 allows remote malicious users to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Plone Plone 2.5 Beta1
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 2.5.4
Plone Plone 2.5.1
Plone Plone 2.5
Plone Plone 2.5.1 Rc
Plone Plone 3.0.2
NA
CVE-2008-4571
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone prior to 3.0.4 allows remote malicious users to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.
Plone Plone 2.5 Beta1
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 2.5.4
Plone Plone 2.5.1
Plone Plone 2.1.2
Plone Plone 2.0.5
Plone Plone 2.5
Plone Plone
Plone Plone 2.5.1 Rc
Plone Plone 3.0.2
NA
CVE-2006-4249
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an malicious user to "masquerade as a group."
Plone Plone 2.5.1
Plone Plone 2.5
NA
CVE-2006-4247
Unspecified vulnerability in the Password Reset Tool prior to 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows malicious users to reset the passwords of other users, related to "an erroneous security declaration."
Plone Plone 2.5
Plone Plone 2.5.1 Rc
NA
CVE-2011-1340
Cross-site scripting (XSS) vulnerability in skins/plone_templates/default_error_message.pt in Plone prior to 2.5.3 allows remote malicious users to inject arbitrary web script or HTML via the type_name parameter to Members/ipa/createObject.
Plone Plone 1.0
Plone Plone 1.0.3
Plone Plone 2.1.4
Plone Plone 2.1.1
Plone Plone 2.0.3
Plone Plone 1.0.4
Plone Plone 2.0
Plone Plone 2.5.1
Plone Plone 2.0.4
Plone Plone 2.1.2
Plone Plone 1.0.1
Plone Plone 2.0.1
Plone Plone 2.0.2
Plone Plone
Plone Plone 1.0.2
Plone Plone 2.0.5
Plone Plone 2.5
Plone Plone 1.0.6
Plone Plone 2.1
Plone Plone 2.1.3
Plone Plone 1.0.5
NA
CVE-2011-0720
Unspecified vulnerability in Plone 2.5 up to and including 4.0, as used in Conga, luci, and possibly other products, allows remote malicious users to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Plone Plone 2.5
Plone Plone 2.5.1
Plone Plone 2.5.2
Plone Plone 2.5.3
Plone Plone 2.5.4
Plone Plone 2.5.5
Plone Plone 3.0
Plone Plone 3.0.1
Plone Plone 3.0.2
Plone Plone 3.0.3
Plone Plone 3.0.4
Plone Plone 3.0.5
Plone Plone 3.0.6
Plone Plone 3.1
Plone Plone 3.1.1
Plone Plone 3.1.2
Plone Plone 3.1.3
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 3.1.6
Plone Plone 3.1.7
Plone Plone 3.2
NA
CVE-2010-2422
Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 up to and including 3.3.4 before hotfix 20100612 allows remote malicious users to inject arbitrary web script or HTML via the safe_html transform.
Plone Plone 3.3
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 3.2.3
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 2.1.4
Plone Plone 3.3.5
Plone Plone 3.0.6
Plone Plone 2.5.4
Plone Plone 3.2
Plone Plone 3.1.1
Plone Plone 2.1.1
Plone Plone 3.3.4
Plone Plone 3.3.2
Plone Plone 3.1.7
Plone Plone 2.5.1
Plone Plone 2.5.3
Plone Plone 3.2.2
Plone Plone 2.1.2
Plone Plone 3.0.3
Plone Plone 3.3.1
NA
CVE-2011-1949
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 up to and including 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422.
Plone Plone 3.3
Plone Plone 4.0.5
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 3.2.3
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 2.1.4
Plone Plone 4.0.2
Plone Plone 3.3.5
Plone Plone 3.0.6
Plone Plone 2.5.4
Plone Plone 3.2
Plone Plone 3.1.1
Plone Plone 2.1.1
Plone Plone 3.3.4
Plone Plone 3.3.2
Plone Plone 4.0.4
Plone Plone 3.1.7
Plone Plone 2.5.1
Plone Plone 4.1
Plone Plone 2.5.3
NA
CVE-2012-5496
kupu_spellcheck.py in Kupu in Plone prior to 4.0 allows remote malicious users to cause a denial of service (ZServer thread lock) via a crafted URL.
Plone Plone 3.3
Plone Plone 1.0
Plone Plone 3.0.1
Plone Plone 1.0.3
Plone Plone 3.0
Plone Plone 3.2.3
Plone Plone
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 2.1.4
Plone Plone 3.0.6
Plone Plone 2.5.4
Plone Plone 3.2
Plone Plone 3.1.1
Plone Plone 2.1.1
Plone Plone 3.3.4
Plone Plone 2.0.3
Plone Plone 1.0.4
Plone Plone 3.3.2
Plone Plone 2.0
Plone Plone 3.1.7
Plone Plone 2.5.1
NA
CVE-2013-4188
traverser.py in Plone 2.1 up to and including 4.1, 4.2.x up to and including 4.2.5, and 4.3.x up to and including 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to &...
Plone Plone 4.3
Plone Plone 4.3.1
Plone Plone 3.3
Plone Plone 4.0.5
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 3.2.3
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 2.1.4
Plone Plone 4.0.2
Plone Plone 3.3.5
Plone Plone 3.0.6
Plone Plone 2.5.4
Plone Plone 3.2
Plone Plone 3.1.1
Plone Plone 2.1.1
Plone Plone 3.3.4
Plone Plone 3.3.2
Plone Plone 4.0.4
Plone Plone 3.1.7
Plone Plone 2.5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »