CVE-2024-23380: Use After Free

Memory corruption while handling user packets during VBO bind operation...

Backup repository upgrade fails after upgrading to v5

Challenge A local backup repository fails to upgrade after upgrading to Veeam Backup for Microsoft 365 5.0 version 5.0.0.1061. Cause In case when the Team Chat folder has been protected with the earlier version of Veeam Backup for Microsoft 365, a backup repository may contain items with several...

vbo-makler.com Cross Site Scripting vulnerability OBB-1217707

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Views Bulk Operations (VBO) - Moderately critical - Access bypass - SA-CONTRIB-2020-003

Views Bulk Operations provides enhancements to running bulk actions on views. The module contains an access bypass vulnerability that might allow users to execute views actions that they should not have access to. This vulnerability is mitigated by the fact that it only occurs in the case of...

Cross site scripting

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...

CVE-2011-3373

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...

CVE-2011-3373

The CVE-2011-3373 entry affects the Drupal module Views Bulk Operations (VBO) for Drupal 6.x, specifically versions 6.x-1.0 through 6.x-1.10 . The vulnerability stems from improper escaping of help text in the vocabulary when user tagging is enabled and the action “Modify node taxonomy terms” is ...

CVE-2011-3373: Improper Neutralization of Input During Web Page Generation

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...

CVE-2015-5515

The Views Bulk Operations VBO module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO...

Code injection

The Views Bulk Operations VBO module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO...

CVE-2015-5515

The CVE-2015-5515 issue affects the Drupal contributed module Views Bulk Operations (VBO) on versions 6.x-1.x and 7.x-3.x prior to 7.x-3.3. The vulnerability arises when the bulk operation for changing Roles is enabled and a user with access to a user listing view (with VBO enabled) can remotely ...

PT-2015-6967

Name of the Vulnerable Software and Affected Versions Views Bulk Operations VBO module versions 6.x-1.x and 7.x-3.x before 7.x-3.3 Description The issue allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing...

CVE-2015-5515: Undefined Security Weakness

The Views Bulk Operations VBO module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO...