Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504723)

None None...

Description of the security update for SharePoint Enterprise Server 2016: September 8, 2020 (KB4484512)

None None...

Services - Moderately critical - Access bypass - SA-CONTRIB-2020-022

This module provides a standardized solution for building API's so that external clients can communicate with Drupal. The module's taxonomy term index resource doesn't take into consideration certain access control tags provided but unused by core, that certain contrib modules depend on. This...

Cross-site Scripting (XSS)

Croogo is vulnerable to cross-site scripting XSS. The attacker can inject malicious script in the title parameter of admin/menus/menus or admin/taxonomy/vocabularies, causing the malicious script to be executed when a user visits the page...

CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

Cross site scripting

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

CVE-2019-20789

Croogo is affected in versions before 3.0.7. The vulnerability is a Cross-Site Scripting (XSS) flaw triggered by crafting a malicious title that is submitted to admin/menus/menus or admin/taxonomy/vocabularies, with the impact being script execution when a user views the page. The root cause, as ...

CVE-2019-20789

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

PT-2020-10762

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 3.0.7 Description The issue allows for XSS attacks via the title to "admin/menus/menus" or "admin/taxonomy/vocabularies". Recommendations For versions prior to 3.0.7, update to version 3.0.7 or later to resolve the...

CVE-2019-20789: Improper Neutralization of Input During Web Page Generation

Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies...

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020 (KB4484301)

None None...

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020 (KB4484299)

None None...

Description of the security update for SharePoint Enterprise Server 2016: March 10, 2020 (KB4484272)

None None...

Description of the security update for SharePoint Enterprise Server 2016: November 12, 2019

None None...

DRUPAL-CONTRIB-2019-095

The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms. The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists...

DRUPAL-CONTRIB-2019-093

This module extends access handling of Drupal Core's Taxonomy module. The module doesn't sufficiently check, if a given entity should be access controlled, defaulting to allowing access even to unpublished Taxonomy Terms. if certain administrative routes should be access controlled, defaulting to...

PT-2019-20548

This module extends access handling of Drupal Core's Taxonomy module. The module doesn't sufficiently check, if a given entity should be access controlled, defaulting to allowing access even to unpublished Taxonomy Terms. if certain administrative routes should be access controlled, defaulting to...

Permissions by Term - Moderately critical - Access bypass - SA-CONTRIB-2019-095

The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms. The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists...