Critical
CVE-2026-54569
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
High
CVE-2011-3587
Zope Command Execution Vulnerability
Medium
CVE-2009-5145
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Medium
CVE-2010-1104
Moderate severity vulnerability that affects Zope2
Medium
CVE-2016-7140
Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web
Medium
CVE-2011-4924
Zope XSS Vulnerability
High
CVE-2012-6661
Plone and Zope2 do not reseed pseudo-random number generator
High
CVE-2012-5507
Plone and Zope2 affected by Race Condition
High
CVE-2012-5489
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
High
CVE-2012-5486
HTTP header injection in Plone and Zope2
High
CVE-2011-2528
High severity vulnerability that affects Plone and Zope2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.