Fieldable Panels Panes - Moderately Critical - XSS - SA-CONTRIB-2016-025

This module enables you to create fieldable entities that have special integration with Panels. The module doesn't sufficiently filter the entity title or admin title fields when they are displayed in either the Panels admin UI or the In-Place Editor IPE, allowing for specially crafted XSS attack...

Rack-Bug - Debugging Toolbar For Rack Applications Implemented As Middleware

Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based security Rack::Bug instrumentation/reporting is broken up into panels. Panels in...

Fieldable Panels Panes - Moderately Critical - Access Bypass - SA-CONTRIB-2016-014

This module enables you to create fieldable entities that have special integration with Panels. The module doesn't check access permissions on a file when it is attached to a field on a Fieldable Panels Panes entity that has been made private and where the file field is set to store files using t...

Schneider Electric ProClima Version Detection

Binary data 9047.prm...

Drupal Fieldable Panels Panes module security bypass vulnerability

Drupal is a free and open source content management system developed in PHP. Drupal Fieldable Panels Panes fails to check the edit permissions of Fieldable Panels Panes entities, allowing remote attackers to edit panes with the permissions of the edit panel...

CVE-2015-7227

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels...

Code injection

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels...

CVE-2015-7227

The CVE-2015-7227 entry affects the Drupal Fieldable Panels Panes module (7.x-1.x) prior to 7.x-1.7. The underlying issue is improper permission checks when editing Fieldable Panels Panes entities, allowing remote authenticated users with general edit permissions to modify panes. Impact is limite...

CVE-2015-7227

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels...

Fieldable Panels Panes - Less Critical - Access bypass - SA-CONTRIB-2015-145

Fieldable Panels Panes enables you to create custom panes for embedding in Panels-based displays Page Manager, Panelizer, Panels Everywhere via a fieldable custom entity type. The module doesn't sufficiently check for permission to edit existing Fieldable Panels Panes entities, thus allowing...

Ctools - Critical - Multiple Vulnerabilities - SA-CONTRIB-2015-141

Cross Site Scripting XSS Ctools in Drupal 6 provides a number of APIs and extensions for Drupal, and is a dependency for many of the most popular modules, including Views, Panels and Entityreference. Many features introduced in Drupal Core once lived in ctools. This vulnerability can be mitigated...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Authentication Bypass Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. An authentication bypass vulnerability exists in Siemens SIMATIC and SIMAT...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Denial of Service Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. A security vulnerability in Siemens SIMATIC HMI Comfort Panels WinCC TIA...

CVE-2015-2822

Siemens SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102...

Code injection

Siemens SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102...

CVE-2015-2822

The CVE-2015-2822 issue concerns Siemens SIMATIC HMI/WinCC components vulnerable to remote man-in-the-middle and potential denial-of-service on port 102/TCP. Connected sources specify affected product families and versions, including SIMATIC HMI Comfort Panels and SIMATIC WinCC Runtime Advanced (...

CVE-2015-2823

Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC TIA Portal 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC TIA Portal 13 SP1 Upd2, SIMATIC...

CVE-2015-2823

CVE-2015-2823 affects Siemens SIMATIC HMI/WinCC products (HMI Basic Panels 2nd Gen and others) where an attacker can authenticate remotely by using a password hash instead of the password. The issue is a password-hash authentication weakness that can enable unauthorized access to multiple SAP/Win...

Code injection

The remote-management module in the 1 Multi Panels, 2 Comfort Panels, and 3 RT Advanced functionality in Siemens SIMATIC WinCC TIA Portal before 13 SP1 and in the 4 panels and 5 runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit,...

SA-CONTRIB-2015-047 - Panopoly Magic - Cross Site Scripting (XSS)

This module enables live previews of Panels panes in the modal dialog for adding or editing them. The module doesn't sufficiently filter the pane title when re-rendering the live preview. This vulnerability is mitigated by the fact that an attacker must have permission to add or edit Panels panes...