plone vulnerabilities (PyPI)
101 vulnerabilities.
plonePyPIPlone Cross-site scripting Vulnerability3.5 LowplonePyPIPlone Arbitrary File Read5.0 MediumplonePyPIPlone is vulnerable to denial of service5.0 MediumplonePyPIPlone denial of service via Caching Bypass5.0 MediumplonePyPIPlone User account enumeration via crafted URL5.0 MediumplonePyPIPlone DoS via Crafted URL5.0 MediumplonePyPIPlone python code injection5.0 MediumplonePyPIPlone Cross-site scripting Vulnerability4.3 MediumplonePyPIPlone Sandbox Bypass8.5 HighplonePyPIPlone Metadata Disclosure5.0 MediumplonePyPIPlone Information Disclosure4.3 MediumplonePyPIPlone Cross-site scripting Vulnerability4.3 MediumplonePyPIPlone and Zope2 vulnerable to unauthorized access to restricted attributes6.5 MediumplonePyPIPlone Code Injection vulnerability5.0 MediumplonePyPIPlone Sandbox Bypass8.5 HighplonePyPIHTTP header injection in Plone and Zope26.4 MediumplonePyPIPlone Code Injection vulnerability6.8 MediumplonePyPIPlone Privilege escalation through exposed underlying API5.5 MediumplonePyPIPlone Filesystem path information leak5.0 MediumplonePyPIPlone Denial of Service vulnerability via decompressing large zip archives3.5 LowplonePyPIPlone's authenticated users able to alter their password despite of policy definition4.0 MediumplonePyPIPlone Improper Access Control Vulnerability5.5 MediumplonePyPIPlone is vulnerable to information exposure via the object manager implementation5.0 MediumplonePyPIPlone Multiple open redirect vulnerabilities5.8 MediumplonePyPIPlone is vulnerable to File System Path Exposure4.3 MediumplonePyPIPlone Unrestricted Filed Manipulation vulnerability via content edit forms4.3 MediumplonePyPIPlone is vulnerable to email spoofing4.0 MediumplonePyPIPlone is vulnerable to Information Exposure when generating zip archives5.8 MediumplonePyPIPlone vulnerable to cross-site scripting4.3 MediumplonePyPIPlone Privilege escalation due improper authorization6.5 MediumplonePyPIPlone Authenticated Denial of Service vulnerability4.3 MediumplonePyPIPlone Open Redirection vulnerability via next parameter5.8 MediumplonePyPIPlone Denial of Service vulnerability5.0 MediumplonePyPIPlone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable9.3 HighplonePyPIPlone XSS Vulnerability4.3 MediumplonePyPIHigh severity vulnerability that affects Plone and Zope27.5 HighplonePyPIPlone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts5.5 MediumplonePyPIPlone Cross-site Scripting vulnerability3.5 LowplonePyPICross-site scripting in Products.CMFPlone and Products.PasswordResetTool4.3 MediumplonePyPIPlone Privilege Escalation Vulnerability7.5 HighplonePyPIPlone Cross-site Scripting vulnerability in PortalTransforms4.3 MediumplonePyPIModerate severity vulnerability that affects Products.PlonePAS6.0 MediumplonePyPIPlone Cross-site Scripting vulnerability in the LiveSearch module4.3 MediumplonePyPIPlone credentials stored in session cookie4.3 MediumplonePyPIPlone CMS Improper Session Management7.5 HighplonePyPIPlone Improper Session Management10.0 HighplonePyPIPlone Cross-site request forgery (CSRF)4.3 MediumplonePyPIPlone Arbitrary Code Execution via Unsafe Handling of Pickles7.5 HighplonePyPIPlone allows a user to masquerade as a group4.3 MediumplonePyPIPlone allows anonymous users to reset any users password through the web via Password Reset Tool6.4 Medium- Show moreLoading…