Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
plone plone vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2015-7318
Plone 3.3.0 up to and including 3.3.6 allows remote malicious users to inject headers into HTTP responses.
Plone Plone 3.3
Plone Plone 3.3.5
Plone Plone 3.3.4
Plone Plone 3.3.2
Plone Plone 3.3.1
Plone Plone 3.3.6
Plone Plone 3.3.3
NA
CVE-2007-5741
Plone 2.5 up to and including 2.5.4 and 3.0 up to and including 3.0.2 allows remote malicious users to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Plone Plone 2.5 Beta1
Plone Plone 3.0.1
Plone Plone 3.0
Plone Plone 2.5.4
Plone Plone 2.5.1
Plone Plone 2.5
Plone Plone 2.5.1 Rc
Plone Plone 3.0.2
4.9
CVSSv3
CVE-2016-4043
Chameleon (five.pt) in Plone 5.0rc1 up to and including 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.
Plone Plone 5.0.1
Plone Plone 5.0.2
Plone Plone 5.0
Plone Plone 5.0.3
Plone Plone 5.0.4
Plone Plone 5.1a1
NA
CVE-2011-2528
Unspecified vulnerability in (1) Zope 2.12.x prior to 2.12.19 and 2.13.x prior to 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows malicious users to gain privileges via unspecified vectors, related to a "highly serious vulner...
Plone Plone Hotfix 20110720
Plone Plone 3.0
Plone Plone 3.0.1
Plone Plone 3.0.2
Plone Plone 3.0.3
Plone Plone 3.0.4
Plone Plone 3.0.5
Plone Plone 3.0.6
Plone Plone 3.1
Plone Plone 3.1.1
Plone Plone 3.1.2
Plone Plone 3.1.3
Plone Plone 3.1.4
Plone Plone 3.1.5.1
Plone Plone 3.1.6
Plone Plone 3.1.7
Plone Plone 3.2
Plone Plone 3.2.1
Plone Plone 3.2.2
Plone Plone 3.2.3
Plone Plone 3.3
Plone Plone 3.3.1
NA
CVE-2008-1394
Plone CMS prior to 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote malicious users to obtain access by sniffing the network.
Plone Plone Cms 2.5
Plone Plone Cms
Plone Plone Cms 2.1.2
Plone Plone Cms 2.0.5
Plone Plone Cms 2.1.3
NA
CVE-2006-1711
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote malicious users to modify portraits.
Plone Plone 2.5 Beta1
Plone Plone 2.1.2
Plone Plone 2.0.5
1 EDB exploit
5.4
CVSSv3
CVE-2017-1000482
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
Plone Plone 5.1
Plone Plone
NA
CVE-2006-4249
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an malicious user to "masquerade as a group."
Plone Plone 2.5.1
Plone Plone 2.5
NA
CVE-2011-1950
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
Plone Plone 4.1
Plone Plone 4.0
NA
CVE-2006-4247
Unspecified vulnerability in the Password Reset Tool prior to 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows malicious users to reset the passwords of other users, related to "an erroneous security declaration."
Plone Plone 2.5
Plone Plone 2.5.1 Rc
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCP
CVE-2024-4577
CVE-2024-2695
CVE-2024-31870
injection
CVE-2024-3813
arbitrary code
CVE-2024-27801
CVE-2024-30120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »