1800 matches found
CVE-2015-7316
Cross-site scripting XSS vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1...
CVE-2015-7318
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses...
CVE-2015-7315
Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator...
PYSEC-2017-54
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses...
CVE-2015-7318
CVE-2015-7318 affects Plone 3.3.0–3.3.6, where remote attackers could inject headers into HTTP responses. The primary source states vulnerable component/version and the impact is header injection in Plone’s HTTP responses. Public references indicate the issue is fixed by a vendor-provided securit...
CVE-2015-7316
Cross-site scripting XSS vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1...
CVE-2015-7318
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses...
CVE-2015-7316
Cross-site scripting XSS vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1...
CVE-2015-7318
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses...
CVE-2015-7316
CVE-2015-7316 is a cross-site scripting (XSS) vulnerability in Plone affecting versions 3.3.0–3.3.6, 4.0.0–4.0.10, 4.1.0–4.1.6, 4.2.0–4.2.7, 4.3.x before 4.3.7, and 5.0rc1. The provided documents do not include root-cause details beyond the XSS description, nor do they specify exploitation status...
CVE-2015-7315
Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator...
CVE-2015-7315
This CVE affects Plone platforms: Plone 3.3.0–3.3.6, 4.0.0–4.0.10, 4.1.0–4.1.6, 4.2.0–4.2.7, 4.3.0–4.3.6, and 5.0rc1. Root cause: remote attackers could add a new member to a Plone site with registration enabled without administrator acknowledgment. Impact stated: unauthorized user addition (no d...
CVE-2015-7315
Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator...
PT-2017-7188
Name of the Vulnerable Software and Affected Versions Plone versions 3.3.0 through 3.3.6 Plone versions 4.0.0 through 4.0.10 Plone versions 4.1.0 through 4.1.6 Plone versions 4.2.0 through 4.2.7 Plone versions 4.3.0 through 4.3.6 Plone version 5.0rc1 Description The issue allows remote attackers ...
CVE-2015-7316: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1...
PT-2017-7185
Name of the Vulnerable Software and Affected Versions Zope Management Interface versions 4.3.7 and earlier Plone versions prior to 5.x Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing...
PT-2017-7191
Name of the Vulnerable Software and Affected Versions Plone versions 3.3.0 through 3.3.6 Description The issue allows remote attackers to inject headers into HTTP responses. Recommendations For Plone versions 3.3.0 through 3.3.6, update to a version that contains a fix for this issue...
CVE-2015-7293: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...
CVE-2015-7315: Improper Access Control
Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator...