Skip to contentPlone vulnerabilities
Newest
- plonePlone unauthorized member addition vulnerabilityCVE-2015-7315Fix available5.9 Medium
- plonePlone Sandbox EscapeCVE-2017-5524Fix available4.3 Medium
- plonePlone vulnerable to Cross-site ScriptingCVE-2016-7140Fix available6.1 Medium
- plonePlone Cross-site Scripting (XSS) vulnerabilityCVE-2016-7139Fix available6.1 Medium
- plonePlone XSSCVE-2016-7138Fix available6.1 Medium
- plonePlone Open Redirect VulnerabilityCVE-2016-7137Fix available6.1 Medium
- plonePlone XSSCVE-2016-7136Fix available6.1 Medium
- plonePlone vulnerable to filesystem information leakCVE-2016-7135Fix available4.9 Medium
- ploneChameleon in Plone allows Authentication BypassCVE-2016-4043Fix available4.9 Medium
- plonePlone vulnerable to unauthorized disclosure of site contentCVE-2016-4042Fix available5.3 Medium
- plonePlone vulnerable to privilege escalation in WebDAVCVE-2016-4041Fix available7.3 High
- plonePlone XSS in Zope ZMICVE-2016-7147Fix available6.1 Medium
- plone, zope +1 morePlone and Zope2 do not reseed pseudo-random number generatorCVE-2012-6661Fix available5.0 Medium
- ploneExposure of Sensitive Information in PloneCVE-2012-5508Fix available5.0 Medium
- plonePlone contains Cross-site Request ForgeryCVE-2012-5500Fix available4.3 Medium
- plone, zope +1 morePlone and Zope2 affected by Race ConditionCVE-2012-5507Fix available4.3 Medium
- plonePlone denial of service via RSS Feed RequestCVE-2012-5506Fix available5.0 Medium
- plonePlone Information DisclosureCVE-2012-5505Fix available5.0 Medium
- plonePlone Cross-site scripting VulnerabilityCVE-2012-5504Fix available4.3 Medium
- plonePlone allows remote attackers to read hidden folder contentsCVE-2012-5503Fix available5.0 Medium
- plonePlone Cross-site scripting VulnerabilityCVE-2012-5502Fix available3.5 Low
- plonePlone Arbitrary File ReadCVE-2012-5501Fix available5.0 Medium
- plonePlone is vulnerable to denial of serviceCVE-2012-5499Fix available5.0 Medium
- plonePlone denial of service via Caching BypassCVE-2012-5498Fix available5.0 Medium
- plonePlone User account enumeration via crafted URLCVE-2012-5497Fix available5.0 Medium
- plonePlone DoS via Crafted URLCVE-2012-5496Fix available5.0 Medium
- plonePlone python code injectionCVE-2012-5495Fix available5.0 Medium
- plonePlone Cross-site scripting VulnerabilityCVE-2012-5494Fix available4.3 Medium
- plonePlone Sandbox BypassCVE-2012-5493Fix available8.5 High
- plonePlone Metadata DisclosureCVE-2012-5492Fix available5.0 Medium
- plonePlone Information DisclosureCVE-2012-5491Fix available4.3 Medium
- plonePlone Cross-site scripting VulnerabilityCVE-2012-5490Fix available4.3 Medium
- plone, zope +1 morePlone and Zope2 vulnerable to unauthorized access to restricted attributesCVE-2012-5489Fix available6.5 Medium
- plonePlone Code Injection vulnerabilityCVE-2012-5488Fix available5.0 Medium
- plonePlone Sandbox BypassCVE-2012-5487Fix available8.5 High
- plone, zope +1 moreHTTP header injection in Plone and Zope2CVE-2012-5486Fix available6.4 Medium
- plonePlone Code Injection vulnerabilityCVE-2012-5485Fix available6.8 Medium
- plonePlone Privilege escalation through exposed underlying APICVE-2013-7061Fix available5.5 Medium
- plonePlone Filesystem path information leakCVE-2013-7060Fix available5.0 Medium
- plonePlone Denial of Service vulnerability via decompressing large zip archivesCVE-2013-4199Fix available3.5 Low
- plonePlone's authenticated users able to alter their password despite of policy definitionCVE-2013-4198Fix available4.0 Medium
- plonePlone Improper Access Control VulnerabilityCVE-2013-4197Fix available5.5 Medium
- plonePlone is vulnerable to information exposure via the object manager implementationCVE-2013-4196Fix available5.0 Medium
- plonePlone Multiple open redirect vulnerabilitiesCVE-2013-4195Fix available5.8 Medium
- plonePlone is vulnerable to File System Path ExposureCVE-2013-4194Fix available4.3 Medium
- plonePlone Unrestricted Filed Manipulation vulnerability via content edit formsCVE-2013-4193Fix available4.3 Medium
- plonePlone is vulnerable to email spoofingCVE-2013-4192Fix available4.0 Medium
- plonePlone is vulnerable to Information Exposure when generating zip archivesCVE-2013-4191Fix available5.8 Medium
- plonePlone vulnerable to cross-site scriptingCVE-2013-4190Fix available4.3 Medium
- plonePlone Privilege escalation due improper authorizationCVE-2013-4189Fix available6.5 Medium
- Show moreLoading…