Crítica
CVE-2026-57149
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 49
Restablecer filtros
Media
CVE-2026-57576
plone.app.dexterity has a Denial of Service due to excessive title or description length
Media
CVE-2026-77401
Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
Media
ghsa-8pcw-h6w9-h46g
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
Crítica
CVE-2026-55247
plone.app.event vulnerable to denial of service via iCalendar import
Crítica
CVE-2026-54569
senaite.core Vulnerable to Eval Injection and Missing Authorization
Baja
CVE-2023-42458
Zope vulnerable to Stored Cross Site Scripting with SVG images
Alta
CVE-2011-3587
Zope Command Execution Vulnerability
Media
CVE-2009-5145
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Media
CVE-2000-0483
Zope DocumentTemplate package allows unauthenticated write
Media
CVE-2002-0687
Zope Server vulnerable to DoS via header injection
Alta
CVE-2000-1211
Zope does not properly perform security registration for legacy names
Alta
CVE-2002-0170
Zope does not properly verify the access for objects with proxy roles
Media
CVE-2000-1212
Zope allows attackers to modify raw image and file data
Alta
CVE-2002-0688
ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Alta
CVE-2000-0062
Zope DTML implementation Improper Authentication
Alta
CVE-2000-0725
Zope does not properly restrict access to the getRoles method
Media
CVE-2010-1104
Moderate severity vulnerability that affects Zope2
Crítica
CVE-2024-51734
Access control vulnerable to user data deletion by anonynmous users
Baja
CVE-2023-44389
Zope management interface vulnerable to stored cross site scripting via the title property
Baja
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Media
CVE-2023-41050
Information disclosure in AccessControl
Alta
CVE-2023-41039
Sandbox escape via various forms of "format".
Alta
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.