Lucene search
+L

19 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2014-5077

Malware in sbrugna...

4.3CVSS6.4AI score0.01191EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-51484

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00307EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/04 12:00 a.m.•12 views

The vulnerability of the Freelinking module in Drupal CMS systems, related to improper authentication, allows attackers to expose protected information and execute a Forceful Browsing attack.

The vulnerability of the Freelinking module in the Drupal CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to disclose protected information and execute a Forceful Browsing attack...

4.3CVSS5.5AI score0.00307EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/09 8:15 p.m.•37 views

CVE-2024-13270

Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...

4.3CVSS0.00307EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 7:19 p.m.•74 views

CVE-2024-13270

The Freelinking module for the Drupal CMS is affected by an Incorrect Authorization vulnerability (CVE-2024-13270) in versions 0.0.0 through 4.0.0 . The root cause is that the module fails to sufficiently check if a user has access to specific URLs before rendering them as links. This allows a re...

4.3CVSS6.7AI score0.00307EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/01/09 7:19 p.m.•15 views

CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034

Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...

4.3CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/01/09 7:19 p.m.•8 views

CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034

Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...

4.8AI score0.00307EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 7:19 p.m.•28 views

CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034

Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...

0.00307EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2024-13270: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...

4.3CVSS5.8AI score0.00307EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•16 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Freelinking prior to version 4.0.1, which stems from the inclusion of an authorization error vulnerability...

4.3CVSS6.7AI score0.00307EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/09/04 12:00 a.m.•3 views

PT-2025-2088

Name of the Vulnerable Software and Affected Versions Drupal Freelinking versions 0.0.0 through 4.0.0 Description The issue is related to an Incorrect Authorization vulnerability in Drupal Freelinking, which allows Forceful Browsing. This vulnerability can be exploited by a remote attacker to...

4.3CVSS6AI score0.00307EPSS
SaveExploits0References11
Patchstack
Patchstack
•added 2024/09/04 12:00 a.m.•10 views

Drupal Freelinking module < 4.0.1 - Authenticated Sensitive Data Exposure vulnerability

Authenticated Sensitive Data Exposure vulnerability discovered by Matthew Radcliffe in WordPress Module Freelinking versions 4.0.1...

7AI score
SaveExploits0References1Affected Software1
Drupal
Drupal
•added 2024/09/04 12:00 a.m.•23 views

Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034

This module enables you to configure a wiki-like input filter that allows users to create links to site and external content. The module doesn't sufficiently check if a user has access to some URLs before rendering them as links. This vulnerability is mitigated by the fact that an attacker must...

4.3CVSS6.8AI score0.00307EPSS
SaveExploits0References7
Drupal
Drupal
•added 2014/11/12 12:00 a.m.•24 views

SA-CONTRIB-2014-109 - Freelinking - Cross Site Scripting (XSS)

The Freelinking module implements a filter framework for easier creation of HTML links to other pages on the site or to external sites. The module does not sanitize the node title when providing a link to the node, opening a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated ...

6.1AI score
SaveExploits0References9
NVD
NVD
•added 2014/08/06 6:55 p.m.•31 views

CVE-2014-5179

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for 1 nodes or 2 users, which allows remote attackers to obtain sensitive information via a crafted link...

4.3CVSS6.1AI score0.01191EPSS
SaveExploits0References3
Prion
Prion
•added 2014/08/06 6:55 p.m.•26 views

Design/Logic Flaw

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for 1 nodes or 2 users, which allows remote attackers to obtain sensitive information via a crafted link...

4.3CVSS6.7AI score0.01191EPSS
SaveExploits0References3
CVE
CVE
•added 2014/08/06 6:00 p.m.•64 views

CVE-2014-5179

The Drupal freelinking and Freelinking Case Tracker contributed modules contain an access control bypass flaw: the modules do not sufficiently check permissions when displaying links to nodes and users, enabling remote retrieval of sensitive information via crafted links. This affects all version...

4.3CVSS6.3AI score0.01191EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2014/08/06 6:00 p.m.•44 views

CVE-2014-5179

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for 1 nodes or 2 users, which allows remote attackers to obtain sensitive information via a crafted link...

6.1AI score0.01191EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/06 12:00 a.m.•5 views

CVE-2014-5179: Undefined Security Weakness

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for 1 nodes or 2 users, which allows remote attackers to obtain sensitive information via a crafted link...

4.3CVSS5.9AI score0.01191EPSS
SaveExploits0References2
Rows per page
Query Builder