Linux Distros Unpatched Vulnerability : CVE-2016-7138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows...

Linux Distros Unpatched Vulnerability : CVE-2016-7139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote...

Linux Distros Unpatched Vulnerability : CVE-2016-7136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross- site scripting XSS attacks via a crafted GET request...

Linux Distros Unpatched Vulnerability : CVE-2015-7315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new...

Linux Distros Unpatched Vulnerability : CVE-2016-7135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. dot dot ...

Linux Distros Unpatched Vulnerability : CVE-2016-7137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to...

RHEL 6 : luci (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - plone: Header injection CVE-2015-7318 - Cross-site scripting XSS vulnerability in ZMI pages that use the...

RHEL 5 : luci (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - plone: Header injection CVE-2015-7318 - Cross-site scripting XSS vulnerability in ZMI pages that use the...

RHEL 5 : conga (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - plone: private content access in through-the-web templates CVE-2017-1000483 - plone: Open URL redirect...

RHEL 5 : plone (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - plone: privilege escalation for overwriting content without needing write permission CVE-2020-7941 -...

Plone CMS <= 6.0.10.1 Information Disclosure Vulnerability

Plone CMS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:plone:plone";...

Improper Authorization

Plone is vulnerable to Improper Authorization. The vulnerability is caused due to improper access control checks, allowing remote attackers to view and list all files hosted on the website via sending a crafted request...

Phone information disclosure vulnerability

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...

GHSA-XG5P-8WG5-RHXM Phone information disclosure vulnerability

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...

CVE-2024-22889

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...

Cross site request forgery (csrf)

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...

CVE-2024-22889

Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...

Plone Security Vulnerability

Plone is an open source content management system CMS built on the Zope application server. A security vulnerability exists in Plone version v6.0.9, which stems from improper access control and allows an attacker to view and enumerate all files hosted on the site by sending a specially crafted...

CVE-2024-22889

CVE-2024-22889 affects Plone, specifically version 6.0.9, where improper access control allows remote attackers to view and enumerate all files hosted on the site with a crafted request. Public sources (NVD) flag it as a high-severity information-disclosure issue (CVSSv3.1: 7.5, Network attack ve...

PT-2024-19597

Name of the Vulnerable Software and Affected Versions Plone version v6.0.9 Description The issue is due to incorrect access control, allowing remote attackers to view and list all files hosted on the website by sending a crafted request. Recommendations For Plone version v6.0.9, update to a versi...