Search API Pages - Critical - Cross Site Scripting - SA-CONTRIB-2021-046

This module enables you to create simple search pages based on Search API without the use of Views. The module doesn’t sufficiently escape all variables provided for custom templates. This vulnerability is mitigated by the fact that the default template provided by the module is not affected...

Webform - Critical - Cross Site Scripting, Access Bypass - SA-CONTRIB-2021-045

Access Bypass: This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently check access for administrative features for webforms attached to nodes using the Webform Node module. This may reveal submitted data or allow an attacker to modify submitted data...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.2.30)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1101 more potentially affected by CVE-2019-5064 via opencv-contrib-python (>=3.4.11.45 <=4.1.2.30)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1099 more potentially affected by CVE-2019-5063 via opencv-contrib-python (>=3.4.11.45 <=4.1.0.25)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1095 more potentially affected by CVE-2019-19624 via opencv-contrib-python (>=3.4.11.45 <=4.13.0.92)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-19624 Source advisory: OSV:GHSA-JGGW-2Q6G-C3M6...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-9423 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-9423 Source advisory: OSV:GHSA-8849-5H85-98QW...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1100 more potentially affected by CVE-2019-9423 via opencv-contrib-python (>=3.4.11.45 <=4.1.1.26)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-9423 Source advisory: OSV:GHSA-8849-5H85-98QW...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-16249 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-16249 Source advisory: OSV:GHSA-X3RM-644H-67M8...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1100 more potentially affected by CVE-2019-16249 via opencv-contrib-python (>=3.4.11.45 <=4.1.1.26)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-16249 Source advisory: OSV:GHSA-X3RM-644H-67M8...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1099 more potentially affected by CVE-2019-15939 via opencv-contrib-python (>=3.4.11.45 <=4.1.0.25)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1099 more potentially affected by CVE-2019-14493 via opencv-contrib-python (>=3.4.11.45 <=4.1.0.25)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1086 more potentially affected by CVE-2019-14492 via opencv-contrib-python (>=4.0.0.21 <=4.1.0.25)

opencv-contrib-python PYPI version =4.0.0.21, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-14492 Source advisory: OSV:GHSA-FW99-F933-RGH8...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1086 more potentially affected by CVE-2019-14491 via opencv-contrib-python (>=4.0.0.21 <=4.1.0.25)

opencv-contrib-python PYPI version =4.0.0.21, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +116 more potentially affected by CVE-2019-14491 via opencv-contrib-python-headless (>=4.0.1.24 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =4.0.1.24, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-14491 Source advisory: OSV:GHSA-FM39-CW8H-3P63...

GHSA-RQXG-XVCQ-3V2F Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread...

openSUSE 15 Security Update : postgresql13 (openSUSE-SU-2021:3255-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3255-1 advisory. - Memory disclosure in certain queriesmore details CVE-2021-3677 Note that Nessus has not tested for this issue but has instead relied only on the...

Domain Group - Critical - Access bypass - SA-CONTRIB-2021-037

This module enables sites to define a domain from Domain Access that points directly to a group page. The module doesn't sufficiently manage the access to content administrative paths allowing an attacker to see and take actions on content nodes they should be allowed to...

The Better Mega Menu - Moderately critical - Cross Site Scripting, Information Disclosure, Multiple vulnerabilities - SA-CONTRIB-2021-038

This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. The module does not sanitize values for CSS properties that are added by admins and rendered on the front-end, allowing attackers to inject malicious code into the front-en...

Search API attachments - Critical - Arbitrary PHP code execution - SA-CONTRIB-2021-034

This module enables you to extract the textual content of files for use on a website, e.g. to display it or use it in search indexes. The module doesn't sufficiently protect the administrator-defined commands that are executed on the server, which leads to post-authentication remote code executio...