Lucene search
+L

4338 matches found

NVD
NVD
added 2009/12/31 7:30 p.m.14 views

CVE-2009-4528

The Organic Groups OG Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors...

6.5CVSS6.3AI score0.01337EPSS
SaveExploits0References7
Prion
Prion
added 2009/12/31 7:30 p.m.13 views

Design/Logic Flaw

The Organic Groups OG Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors...

6.5CVSS6.7AI score0.01337EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2009/12/31 7:0 p.m.36 views

CVE-2009-4528

The CVE-2009-4528 entry concerns Drupal’s Organic Groups (OG) Vocabulary module, version 6.x before 6.x-1.0. The vulnerability allows remote authenticated group members to bypass access restrictions and to create, modify, or read vocabulary items via unspecified vectors. Affected software: Organi...

6.5CVSS6.3AI score0.01337EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2009/12/31 7:0 p.m.20 views

CVE-2009-4528

The Organic Groups OG Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors...

6.3AI score0.01337EPSS
SaveExploits0References7
Nmap
Nmap
added 2009/12/14 7:30 a.m.224 views

citrix-enum-apps-xml NSE Script

Extracts a list of applications, ACLs, and settings from the Citrix XML service. The script returns more output with higher verbosity. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline,...

10CVSS9.4AI score0.99448EPSS
SaveExploits33
zdt
zdt
added 2009/12/14 12:0 a.m.25 views

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability

Exploit for unknown platform in category web applications ================================================== Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability ================================================== Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c --...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2009/11/24 2:0 a.m.24 views

CVE-2009-4063

Cross-site scripting XSS vulnerability in the Subgroups for Organic Groups OG module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles...

5.8AI score0.01223EPSS
SaveExploits0References6
Nmap
Nmap
added 2009/11/20 4:5 p.m.195 views

smb-enum-groups NSE Script

Obtains a list of groups from the remote Windows system, as well as a list of the group's users. This works similarly to enum.exe with the /G switch. The following MSRPC functions in SAMR are used to find a list of groups and the RIDs of their users. Keep in mind that MSRPC refers to groups as...

10CVSS9.4AI score0.99448EPSS
SaveExploits33
Drupal
Drupal
added 2009/11/18 12:0 a.m.14 views

SA-CONTRIB-2009-105 - Subgroups for Organic Groups - Cross Site Scripting

The Subgroups For Organic Groups module enables users to set group hierarchy. The module does not filter the titles of some nodes before output, leading to a cross-site scripting XSS vulnerability. Versions affected Subgroups For Organic Groups versions for Drupal 5.x prior to 5.x-4.0 Drupal core...

5.5AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2009/11/10 9:7 p.m.13 views

Facebook Administrator Groups Hijacked

As of this morning, an anonymous group hijacked more than 200 Facebook groups and renamed them “Control Your Info”. Pasted on each group’s Wall was a message announcing that it had been “hijacked” and reminding members to be careful about controlling personal information on social networking site...

3AI score
SaveExploits0References2
Fedora
Fedora
added 2009/11/04 12:40 p.m.27 views

[SECURITY] Fedora 10 Update: squidGuard-1.4-8.fc10

squidGuard can be used to - limit the web access for some users to a list of accepted/well known web servers and/or URLs only. - block access to some listed or blacklisted web servers and/or URLs for some users. - block access to URLs matching a list of regular expressions or words for some users...

5CVSS5.6AI score0.03829EPSS
SaveExploits0
Drupal
Drupal
added 2009/11/04 12:0 a.m.15 views

SA-CONTRIB-2009-095 - Smartqueue OG - Access Bypass

The Smartqueueog module uses Nodequeue's Smartqueue API to provide a Nodequeue for organic groups which is editable by members of that group or the group's administrators. Users with the "administer nodequeue" permission have the option to batch create subqueues individual instances of a queue fo...

6.8AI score
SaveExploits0References6
Drupal
Drupal
added 2009/11/04 12:0 a.m.18 views

SA-CONTRIB-2009-097 - Organic Groups Vocabulary - Cross Site Scripting

The Organic Groups Vocabulary module enables a vocabulary to be restricted for use to a specific Organic Group. The module does not sanitize before outputting the group title in some cases, resulting in a cross-site scripting XSS vulnerability. Such an attack may lead to a malicious user gaining...

6.1AI score
SaveExploits0References7
NVD
NVD
added 2009/10/26 5:30 p.m.15 views

CVE-2009-3786

Cross-site scripting XSS vulnerability in Organic Groups OG Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title...

4.3CVSS5.7AI score0.01707EPSS
SaveExploits0References13
Prion
Prion
added 2009/10/26 5:30 p.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in Organic Groups OG Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title...

4.3CVSS6.2AI score0.01707EPSS
SaveExploits0References13Affected Software1
CVE
CVE
added 2009/10/26 5:0 p.m.51 views

CVE-2009-3786

CVE-2009-3786 affects Drupal’s Organic Groups (OG) Vocabulary module. Vulnerable: OG Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1. Issue: cross-site scripting via the group title, enabling remote injection of arbitrary web script/HTML. Impact as stated: script execution in user context; n...

4.3CVSS5.8AI score0.01707EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
added 2009/10/26 5:0 p.m.22 views

CVE-2009-3786

Cross-site scripting XSS vulnerability in Organic Groups OG Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title...

5.7AI score0.01707EPSS
SaveExploits0References13
OpenVAS
OpenVAS
added 2009/10/23 12:0 a.m.17 views

Get all Windows Admin Users and Groups over WMI (win)

Get all Windows non System Services and Eventlog Servicestate over WMI. OpenVAS Vulnerability Test $Id: GSHBWMIgetAdminUsers.nasl 7279 2017-09-26 13:40:36Z cfischer $ Get all Windows Admin Users and Groups over WMI win Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH,...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/10/23 12:0 a.m.17 views

Get all Windows Admin Users and Groups over WMI - Windows

Get all Windows non System Services and Eventlog Servicestate over WMI. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
Drupal
Drupal
added 2009/10/14 12:0 a.m.6 views

SA-CONTRIB-2009-071 - Organic Groups Vocabulary Access Bypass

Description The Organic Groups Vocabulary module enables an organic group to have a group specific vocabulary. A vulnerability in this module allows any group member, even if they are not a group admin, to view, edit, and create vocabularies and terms for all groups. Versions affected Organic...

5.5AI score
SaveExploits0References6
Rows per page
Query Builder