Skip to content
OpenAdvisories

Archive

10 October 2011

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

    The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability t…

  • High —
    CVE-2011-3587 Public exploit EPSS 78%

    Zope Command Execution Vulnerability

    Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.