Critical
CVE-2026-57149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 49
Reset filters
Medium
CVE-2026-57576
plone.app.dexterity has a Denial of Service due to excessive title or description length
Medium
CVE-2026-77401
Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
Medium
ghsa-8pcw-h6w9-h46g
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
Critical
CVE-2026-55247
plone.app.event vulnerable to denial of service via iCalendar import
Critical
CVE-2026-54569
senaite.core Vulnerable to Eval Injection and Missing Authorization
Low
CVE-2023-42458
Zope vulnerable to Stored Cross Site Scripting with SVG images
High
CVE-2011-3587
Zope Command Execution Vulnerability
Medium
CVE-2009-5145
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Medium
CVE-2000-0483
Zope DocumentTemplate package allows unauthenticated write
Medium
CVE-2002-0687
Zope Server vulnerable to DoS via header injection
High
CVE-2000-1211
Zope does not properly perform security registration for legacy names
High
CVE-2002-0170
Zope does not properly verify the access for objects with proxy roles
Medium
CVE-2000-1212
Zope allows attackers to modify raw image and file data
High
CVE-2002-0688
ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
High
CVE-2000-0062
Zope DTML implementation Improper Authentication
High
CVE-2000-0725
Zope does not properly restrict access to the getRoles method
Medium
CVE-2010-1104
Moderate severity vulnerability that affects Zope2
Critical
CVE-2024-51734
Access control vulnerable to user data deletion by anonynmous users
Low
CVE-2023-44389
Zope management interface vulnerable to stored cross site scripting via the title property
Low
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Medium
CVE-2023-41050
Information disclosure in AccessControl
High
CVE-2023-41039
Sandbox escape via various forms of "format".
High
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.