plone vulnerabilities (PyPI)

101 vulnerabilities.

• plone PyPI Phone information disclosure vulnerability CVE-2024-22889 Public exploit 7.5 HighMarch 5, 2024
• plone PyPI Cross-Frame Scripting (XFS) on Plone CMS CVE-2024-0669 Fix available 6.3 MediumJanuary 18, 2024
• plone PyPI Server-Side Request Forgery in Plone CMS CVE-2021-33926 Fix available 8.8 HighFebruary 17, 2023
• plone PyPI Plone has stored XSS in folder contents CVE-2021-35959 Fix available 5.4 MediumJune 30, 2021
• plone PyPI Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone CVE-2021-33507 Fix available 6.1 MediumMay 21, 2021
• plone PyPI Cross-site scripting in Plone CVE-2021-33508 Fix available 5.4 MediumMay 21, 2021
• plone PyPI Incorrect Permission Assignment for Critical Resource in Plone CVE-2021-33509 Fix available 9.9 CriticalMay 21, 2021
• plone PyPI Server-Side Request Forgery in Plone CVE-2021-33510 Fix available 4.3 MediumMay 21, 2021
• plone PyPI Server-Side Request Forgery in Plone CVE-2021-33511 Fix available 7.5 HighMay 21, 2021
• plone PyPI Cross-site scripting in Plone CVE-2021-33512 Fix available 5.4 MediumMay 21, 2021
• plone PyPI Cross-site scripting in Plone CVE-2021-33513 Fix available 5.4 MediumMay 21, 2021
• plone PyPI Plone XSS in User Fullname Property and File Upload CVE-2021-3313 Fix available 5.4 MediumMay 20, 2021
• plone PyPI Plone XSS Vulnerability CVE-2021-29002 5.4 MediumMarch 24, 2021
• plone PyPI Improper Restriction of XML External Entity Reference in Plone CVE-2020-28736 Fix available 8.8 HighDecember 30, 2020
• plone PyPI SSRF attacks via tracebacks in Plone CVE-2020-28735 Fix available 8.8 HighDecember 30, 2020
• plone PyPI Improper Restriction of XML External Entity Reference in Plone CVE-2020-28734 Fix available 8.8 HighDecember 30, 2020
• plone PyPI Plone Open Redirect Vulnerability CVE-2020-7936 Fix available 6.1 MediumJanuary 23, 2020
• plone PyPI Plone cross site scripting (XSS) CVE-2020-7937 Fix available 5.4 MediumJanuary 23, 2020
• plone PyPI Plone Privilege Escallation CVE-2020-7938 Fix available 8.8 HighJanuary 23, 2020
• plone PyPI Plone SQL Injection Vulnerability CVE-2020-7939 Fix available 8.8 HighJanuary 23, 2020
• plone PyPI Plone allows weak passwords CVE-2020-7940 Fix available 7.5 HighJanuary 23, 2020
• plone PyPI Plone Unauthenticated Write Vulnerability CVE-2020-7941 Fix available 9.8 CriticalJanuary 23, 2020
• plone PyPI Plone Zope cross-site scripting (XSS) vulnerability CVE-2013-7062 Fix available 6.1 MediumJanuary 2, 2020
• plone PyPI Plone Open Redirect CVE-2017-1000484 Fix available 6.1 MediumJanuary 3, 2018
• plone PyPI Plone Unauthorized Access Vulnerability CVE-2017-1000483 Fix available 6.5 MediumJanuary 3, 2018
• plone PyPI Products.CMFPlone XSS in profile home_page property CVE-2017-1000482 Fix available 5.4 MediumJanuary 3, 2018
• plone PyPI Products.CMFPlone Open Redirect Vulnerability CVE-2017-1000481 Fix available 6.1 MediumJanuary 3, 2018
• plone PyPI Plone vulnerable to cross-site request forgery CVE-2015-7293 Public exploitFix available 8.8 HighSeptember 25, 2017
• plone PyPI Plone Header Injection CVE-2015-7318 Fix available 7.5 HighSeptember 25, 2017
• plone PyPI Plone Cross-site Scripting Vulnerability CVE-2015-7316 Fix available 6.1 MediumSeptember 25, 2017
• plone PyPI Plone unauthorized member addition vulnerability CVE-2015-7315 Fix available 5.9 MediumSeptember 25, 2017
• plone PyPI Plone Sandbox Escape CVE-2017-5524 Fix available 4.3 MediumMarch 23, 2017
• plone PyPI Plone vulnerable to Cross-site Scripting CVE-2016-7140 Fix available 6.1 MediumMarch 7, 2017
• plone PyPI Plone Cross-site Scripting (XSS) vulnerability CVE-2016-7139 Fix available 6.1 MediumMarch 7, 2017
• plone PyPI Plone XSS CVE-2016-7138 Fix available 6.1 MediumMarch 7, 2017
• plone PyPI Plone Open Redirect Vulnerability CVE-2016-7137 Fix available 6.1 MediumMarch 7, 2017
• plone PyPI Plone XSS CVE-2016-7136 Fix available 6.1 MediumMarch 7, 2017
• plone PyPI Plone vulnerable to filesystem information leak CVE-2016-7135 Fix available 4.9 MediumMarch 7, 2017
• plone PyPI Chameleon in Plone allows Authentication Bypass CVE-2016-4043 Fix available 4.9 MediumFebruary 24, 2017
• plone PyPI Plone vulnerable to unauthorized disclosure of site content CVE-2016-4042 Fix available 5.3 MediumFebruary 24, 2017
• plone PyPI Plone vulnerable to privilege escalation in WebDAV CVE-2016-4041 Fix available 7.3 HighFebruary 24, 2017
• plone PyPI Plone XSS in Zope ZMI CVE-2016-7147 Fix available 6.1 MediumFebruary 4, 2017
• plone PyPI Plone and Zope2 do not reseed pseudo-random number generator CVE-2012-6661 Fix available 5.0 MediumNovember 3, 2014
• plone PyPI Exposure of Sensitive Information in Plone CVE-2012-5508 Fix available 5.0 MediumNovember 3, 2014
• plone PyPI Plone contains Cross-site Request Forgery CVE-2012-5500 Fix available 4.3 MediumNovember 3, 2014
• plone PyPI Plone and Zope2 affected by Race Condition CVE-2012-5507 Fix available 4.3 MediumSeptember 30, 2014
• plone PyPI Plone denial of service via RSS Feed Request CVE-2012-5506 Fix available 5.0 MediumSeptember 30, 2014
• plone PyPI Plone Information Disclosure CVE-2012-5505 Fix available 5.0 MediumSeptember 30, 2014
• plone PyPI Plone Cross-site scripting Vulnerability CVE-2012-5504 Fix available 4.3 MediumSeptember 30, 2014
• plone PyPI Plone allows remote attackers to read hidden folder contents CVE-2012-5503 Fix available 5.0 MediumSeptember 30, 2014
• Show olderLoading…