Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/plone@3.0.3
Typepypi
Namespace
Nameplone
Version3.0.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.0.4
Latest_non_vulnerable_version6.0.7
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-gxgu-mp2h-hfe1
vulnerability_id VCID-gxgu-mp2h-hfe1
summary Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
references
0
reference_url http://osvdb.org/42071
reference_id
reference_type
scores
url http://osvdb.org/42071
1
reference_url http://osvdb.org/42072
reference_id
reference_type
scores
url http://osvdb.org/42072
2
reference_url http://plone.org/about/security/advisories/cve-2007-5741
reference_id
reference_type
scores
url http://plone.org/about/security/advisories/cve-2007-5741
3
reference_url http://secunia.com/advisories/27530
reference_id
reference_type
scores
url http://secunia.com/advisories/27530
4
reference_url http://secunia.com/advisories/27559
reference_id
reference_type
scores
url http://secunia.com/advisories/27559
5
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/38288
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/38288
6
reference_url https://github.com/plone/Plone
reference_id
reference_type
scores
url https://github.com/plone/Plone
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml
8
reference_url https://web.archive.org/web/20080517012557/http://www.securityfocus.com/bid/26354
reference_id
reference_type
scores
url https://web.archive.org/web/20080517012557/http://www.securityfocus.com/bid/26354
9
reference_url https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded
10
reference_url http://www.debian.org/security/2007/dsa-1405
reference_id
reference_type
scores
url http://www.debian.org/security/2007/dsa-1405
11
reference_url http://www.securityfocus.com/archive/1/483343/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/483343/100/0/threaded
12
reference_url http://www.securityfocus.com/bid/26354
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/26354
13
reference_url http://www.vupen.com/english/advisories/2007/3754
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2007/3754
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2007-5741
reference_id CVE-2007-5741
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2007-5741
15
reference_url https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741
reference_id CVE-2007-5741
reference_type
scores
url https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741
16
reference_url https://github.com/advisories/GHSA-hf26-vvmx-x8c8
reference_id GHSA-hf26-vvmx-x8c8
reference_type
scores
url https://github.com/advisories/GHSA-hf26-vvmx-x8c8
fixed_packages
0
url pkg:pypi/plone@2.5.5
purl pkg:pypi/plone@2.5.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@2.5.5
1
url pkg:pypi/plone@3.0.3
purl pkg:pypi/plone@3.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.0.3
aliases CVE-2007-5741, GHSA-hf26-vvmx-x8c8, PYSEC-2007-4
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gxgu-mp2h-hfe1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/plone@3.0.3