CVE-2017-7305

Summary: CVE-2017-7305 concerns Riverbed RiOS where a bootloader password is optional, allowing physically proximate attackers to bypass the secure-vault protection via crafted boot. The available documents confirm that RiOS up to certain versions (notably 9.6.0 and prior to 9.6.1) does not requi...

CVE-2015-7305

The vulnerability CVE-2015-7305 affects the Drupal Scald module (Scald 7.x-1.x) prior to 7.x-1.5, where a misconfiguration allows remote attackers to obtain sensitive atom property information via a debug context, bypassing field restrictions. Affected software is the Scald: Media Management made...

Scald - Moderately Critical - Information Disclosure - SA-CONTRIB-2015-151

This module enables you to easily manage your media assets and re-use them in all your content. The module provided a "debug" context that gave access to all the atom properties, including all the fields attached to this atom, without applying the corresponding field restrictions. This...

CVE-2013-7305

CVE-2013-7305 affects the e107 CMS (versions up to 1.0.4). The vulnerability lies in fpw.php, which does not check the user_ban field, enabling remote attackers to reset passwords by sending a pwsubmit request and using access to the banned user’s email account. Multiple sources (Red Hat entry an...

CVE-2013-7305

fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...