Crítica
CVE-2026-57149
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 124
Restablecer filtros
Media
CVE-2026-57576
plone.app.dexterity has a Denial of Service due to excessive title or description length
Media
ghsa-8pcw-h6w9-h46g
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
Crítica
CVE-2026-55248
plone.app.portlets vulnerable to denial of service via RSS feed portlet
Crítica
CVE-2026-55247
plone.app.event vulnerable to denial of service via iCalendar import
Crítica
CVE-2026-54569
senaite.core Vulnerable to Eval Injection and Missing Authorization
Media
CVE-2026-54503
plone.app.textfield: Stored XSS by spoofing mime type
Media
ghsa-8rqh-vxpr-x77p
plone.restapi: Stored XSS by spoofing mime type
Media
CVE-2024-22889
Phone information disclosure vulnerability
Alta
CVE-2024-0669
Cross-Frame Scripting vulnerability has been found on Plone CMS
Alta
CVE-2011-3587
Zope Command Execution Vulnerability
Media
CVE-2011-1340
Plone XSS Vulnerability
Alta
CVE-2011-4030
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
Media
CVE-2008-4571
Plone Cross-site Scripting vulnerability in the LiveSearch module
Media
CVE-2008-1396
Plone credentials stored in session cookie
Alta
CVE-2008-1393
Plone Improper Session Management
Alta
CVE-2008-1394
Plone CMS Improper Session Management
Media
CVE-2006-1711
Plone allows remote users to modify arbitrary portraits
Media
CVE-2026-28413
Products.isurlinportal has possible open redirect when using more than 2 forward slashes
Baja
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Media
CVE-2023-41048
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross sit
Alta
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Alta
CVE-2023-41039
Sandbox escape via various forms of "format".
Alta
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.