10 matches found
EUVD-2012-5473
Malware in sbrugna...
EUVD-2014-8977
Malware in sbrugna...
EUVD-2008-6869
Malware in sbrugna...
CVE-2014-9151
The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password...
CVE-2009-2035
Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors...
PT-2015-6575
Name of the Vulnerable Software and Affected Versions Drupal Services module versions 7.x-3.x before 7.x-3.12 Description The issue allows remote authenticated users with the "Save file information" permission to execute arbitrary code via a crafted filename in the resource/endpoint for uploading...
Drupal Services Basic Authentication Module Access Bypass Vulnerability
Drupal is an open source content management platform. An access bypass vulnerability exists in the Drupal Services Basic Authentication Module, which allows an attacker to bypass security restrictions and perform unauthorized access...
PT-2014-8853
Name of the Vulnerable Software and Affected Versions Drupal Services module versions 7.x-3.x before 7.x-3.10 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the callback parameter in a JSONP response...
PT-2014-8851
Name of the Vulnerable Software and Affected Versions Drupal Services module versions 7.x-3.x before 7.x-3.10 Description The issue allows remote attackers to gain access through a brute-force attack on the administrative password due to improper rate limiting of authentication attempts...
