Filters
Plone PloneThe HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allo…
7.5
EPSS
0.05%
First published (updated )
pip/PloneCross-Frame Scripting (XFS) on Plone CMS
7.1
EPSS
0.05%
First published (updated )
Plone Restplone.rest vulnerable to Denial of Service when ++api++ is used many times
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Plone PloneRemote Code Execution via traversal in TAL expressions
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/plone.restapiplone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate t…
8.8
First published (updated )
pip/PloneMissing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak pa…
7.5
First published (updated )
Plone PlonePlone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV req…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Plone PloneZope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo…
7.5
First published (updated )
Plone Ploneftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder con…
7.5
First published (updated )
Plone Ploneat_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Plone Plonepython_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a den…
7.5
First published (updated )
Plone Plonekupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial of service …
7.5
First published (updated )
Plone PloneThe isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x throug…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Plone PlonequeryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass cachin…
7.5
First published (updated )
Plone Plonepython_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a den…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zope ZopeUnspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plo…
7.5
First published (updated )
Plone Plone CmsPlone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for …
7.5
First published (updated )
Plone Plone CmsPlone CMS does not record users' authentication states, and implements the logout feature solely on …
7.5
First published (updated )