170 matches found
CVE-2024-22889-Plone-v6.0.9
Product: Plone CMS Version: v6.0.9 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-22889 Description: Due to incorect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via...
plown
About Plown is a security scanner for Plone CMS. Although Plone has the best security track record of any major CMS and is considered highly secure, misconfigurations and weak passwords might enable system break-ins. Plown has been developed to ease the discovery of usernames and passwords, and a...
PYSEC-2026-734 Plone CMS Improper Session Management
Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...
CVE-2021-33926
An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.2, 5.1.1 5.1, 5.0rc3, 5.0rc2, 5.0rc1, 5.0.9, 5.0.8, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.10, 5.0.1, 5.0, 4.3.9, 4.3.8, 4.3.7, 4.3.6, 4.3.5, 4.3.4...
CVE-2025-61668
Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...
EUVD-2017-0091
Malware in sbrugna...
EUVD-2017-0092
Malware in sbrugna...
EUVD-2021-0196
Malware in sbrugna...
EUVD-2017-0096
Malware in sbrugna...
EUVD-2017-0095
Malware in sbrugna...
EUVD-2017-0093
Malware in sbrugna...
EUVD-2008-0008
Malware in sbrugna...
EUVD-2021-0188
Malware in sbrugna...
EUVD-2008-1400
Malware in sbrugna...
EUVD-2017-0094
Malware in sbrugna...
EUVD-2022-2540
Malicious code in bioql PyPI...
EUVD-2023-0204
Malicious code in bioql PyPI...
EUVD-2022-4170
Malicious code in bioql PyPI...