Critical
CVE-2021-33509
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 124
Reset filters
Medium
CVE-2021-33508
Cross-site scripting in Plone
High
CVE-2020-28736
Improper Restriction of XML External Entity Reference in Plone
High
CVE-2020-28735
SSRF attacks via tracebacks in Plone
High
CVE-2020-28734
Improper Restriction of XML External Entity Reference in Plone
Medium
CVE-2021-29002
Plone XSS Vulnerability
Medium
CVE-2021-21360
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Medium
CVE-2021-21337
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
High
CVE-2021-21336
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Critical
CVE-2020-7941
Plone Unauthenticated Write Vulnerability
Medium
CVE-2011-1950
Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts
Medium
CVE-2011-1948
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
Medium
CVE-2009-0662
Moderate severity vulnerability that affects Products.PlonePAS
Medium
CVE-2017-1000484
Plone Open Redirect
Medium
CVE-2017-5524
Plone Sandbox Escape
High
CVE-2012-6661
Plone and Zope2 do not reseed pseudo-random number generator
High
CVE-2012-5507
Plone and Zope2 affected by Race Condition
High
CVE-2012-5503
Plone allows remote attackers to read hidden folder contents
High
CVE-2012-5489
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
High
CVE-2012-5486
HTTP header injection in Plone and Zope2
Medium
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Medium
CVE-2013-7060
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
High
CVE-2011-4462
Plone Denial of Service vulnerability
High
CVE-2011-2528
High severity vulnerability that affects Plone and Zope2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.