Lucene search
+L

136 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2010-1573

Malware in sbrugna...

6CVSS5.8AI score0.01379EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2015-4421

Malware in sbrugna...

5.8CVSS5.8AI score0.01305EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2010-2030

Malware in sbrugna...

4.3CVSS5.8AI score0.01033EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•31 views

EUVD-2010-1574

Malware in sbrugna...

6.8CVSS5.8AI score0.00671EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2015-6665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote...

4.3CVSS7.4AI score0.02677EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/16 12:00 a.m.•4 views

PT-2021-31119

Chaos tool suite ctools module provides a number of APIs and extensions for Drupal, its 8.x-3.x branch is a start from scratch to evaluate the features of ctools that didn't make it into Drupal Core 8.0.x and port them. The module doesn't sufficiently handle block access control on its EntityView...

5.9AI score
SaveExploits0References2
Drupal
Drupal
•added 2021/06/16 12:00 a.m.•46 views

Chaos Tool Suite (ctools) - Moderately critical - Access bypass - SA-CONTRIB-2021-015

Chaos tool suite ctools module provides a number of APIs and extensions for Drupal, its 8.x-3.x branch is a start from scratch to evaluate the features of ctools that didn't make it into Drupal Core 8.0.x and port them. The module doesn't sufficiently handle block access control on its EntityView...

6.5AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/05/12 12:00 a.m.•7 views

PT-2021-31116

Chaos tool suite ctools module provides a number of APIs and extensions for Drupal, it's 8.x-3.x branch is a start from scratch to evaluate the features of ctools that didn't make it into Drupal Core 8.0.x and port them. The module doesn't sufficiently handle access control on its EntityView...

5.9AI score
SaveExploits0References2
Drupal
Drupal
•added 2021/05/12 12:00 a.m.•27 views

Chaos Tool Suite (ctools) - Moderately critical - Information disclosure - SA-CONTRIB-2021-009

Chaos tool suite ctools module provides a number of APIs and extensions for Drupal, it's 8.x-3.x branch is a start from scratch to evaluate the features of ctools that didn't make it into Drupal Core 8.0.x and port them. The module doesn't sufficiently handle access control on its EntityView...

6.6AI score
SaveExploits0References6
CNVD
CNVD
•added 2017/08/08 12:00 a.m.•19 views

Drupal Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Ctools Chaos tool suite is one of the API modules used to improve the development experience. A security vulnerability exists in ctools in Drupal in versions 6.x-1.x prior to 6.x-1.14 a...

7.5CVSS8AI score0.0111EPSS
SaveExploits0References1
Prion
Prion
•added 2017/08/07 5:29 p.m.•28 views

Code injection

ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page...

5CVSS7AI score0.0111EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2017/08/07 5:29 p.m.•34 views

CVE-2015-7875

ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page...

7.5CVSS7.5AI score0.0111EPSS
SaveExploits0References3
CVE
CVE
•added 2017/08/07 5:00 p.m.•68 views

CVE-2015-7875

CVE-2015-7875 concerns the Drupal Chaos tool suite (ctools) module. Affected versions: ctools 6.x-1.x prior to 6.x-1.14 and 7.x-1.x prior to 7.x-1.8. The flaw is improper validation of the edit permission for the content type plugin used by Panels and similar systems, allowing a remote authentica...

7.5CVSS8.5AI score0.0111EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2017/08/07 5:00 p.m.•47 views

CVE-2015-7875

ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page...

7.5AI score0.0111EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/08/07 12:00 a.m.•4 views

PT-2017-7284

Name of the Vulnerable Software and Affected Versions ctools versions 6.x-1.x prior to 6.x-1.14 ctools versions 7.x-1.x prior to 7.x-1.8 Description The issue concerns the failure to verify the "edit" permission for content type plugins used in Panels and similar systems, which can lead to...

7.5CVSS0.0111EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/07 12:00 a.m.•8 views

CVE-2015-7875: Undefined Security Weakness

ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page...

7.5CVSS5.8AI score0.0111EPSS
SaveExploits0References2
Fedora
Fedora
•added 2017/03/08 1:59 p.m.•31 views

[SECURITY] Fedora 25 Update: drupal7-metatag-1.21-1.fc25

The Metatag module allows you to automatically provide structured metadata, aka "meta tags", about your website. In the context of search engine optimization, when people refer to meta tags they are usually referring to the meta description tag and the meta keywords tag that may help improve the...

0.3AI score
SaveExploits0
Drupal
Drupal
•added 2016/06/08 12:00 a.m.•26 views

Page Manager Search - Moderately Critical - Information disclosure - SA-CONTRIB-2016-032

This module enables you to make Panels pages and other pages managed by CTools' Page Manager submodule indexible and searchable through the standard Search module provided in Drupal core. The module doesn't block access to Page Manager pages which have been disabled. CVE identifiers issued ACVE...

7.2AI score
SaveExploits0References12
Cvelist
Cvelist
•added 2016/01/08 7:00 p.m.•43 views

CVE-2015-8761

The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import...

9.4AI score0.01481EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/01/08 12:00 a.m.•6 views

PT-2016-4006

Name of the Vulnerable Software and Affected Versions Drupal Values module version 7.x-1.x before 7.x-1.2 Description The issue concerns a permission checking problem in the Values module for Drupal. This allows remote administrators with the "Import value sets" permission to execute arbitrary PH...

9CVSS0.01481EPSS
SaveExploits0References5
Rows per page
Query Builder