CVE-2015-5512: Improper Access Control

The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in a URL...

PT-2015-6942

Name of the Vulnerable Software and Affected Versions Views module versions 7.x-3.5 through 7.x-3.10 for Drupal Description The issue concerns the views fetch data method in the Views module for Drupal, which fails to rebuild the full cache if the static cache is not empty. This allows remote...

CVE-2015-5509: Undefined Security Weakness

The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors...

PT-2015-6964

Name of the Vulnerable Software and Affected Versions Drupal me aliases module versions 6.x-2.x before 6.x-2.10 Drupal me aliases module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote attackers to access Views by substituting 'me' for a user id in a URL, using the 'me' user...

CVE-2015-5515: Undefined Security Weakness

The Views Bulk Operations VBO module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO...

PT-2015-6967

Name of the Vulnerable Software and Affected Versions Views Bulk Operations VBO module versions 6.x-1.x and 7.x-3.x before 7.x-3.3 Description The issue allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing...

PT-2015-6961

Name of the Vulnerable Software and Affected Versions Administration Views module versions 7.x-1.x before 7.x-1.4 for Drupal Description The issue allows remote administrators to bypass intended restrictions via unspecified vectors due to improper access granting to administration pages when used...

Drupal Administration Views Module Information Disclosure Vulnerability

Drupal is a free, open source content management system developed in PHP.Administration Views is a module for replacing administration overview or list pages. A security vulnerability exists in the Drupal Administration Views module that allows remote attackers to submit special requests to obtai...

Fedora 22 : drupal7-views_bulk_operations-3.3-1.fc22 (2015-11318)

7.x-3.3 See SA-CONTRIB-2015-131 Changes since 7.x-3.2: - Fix security vulnerability, by AdamPS. - Remove an entitylabel workaround that core no longer needs. - Issue 2427381 by axel.rutz: Rules component lacks entity type - Issue 2418751 by anrikun: Archive action fails silently - Issue 2318273 b...

Fedora 21 : drupal7-views_bulk_operations-3.3-1.fc21 (2015-11278)

7.x-3.3 See SA-CONTRIB-2015-131 Changes since 7.x-3.2: - Fix security vulnerability, by AdamPS. - Remove an entitylabel workaround that core no longer needs. - Issue 2427381 by axel.rutz: Rules component lacks entity type - Issue 2418751 by anrikun: Archive action fails silently - Issue 2318273 b...

[SECURITY] Fedora 22 Update: drupal7-views_bulk_operations-3.3-1.fc22

This module augments Views by allowing bulk operations to be executed on the displayed rows. It does so by showing a checkbox in front of each node, and adding a select box containing operations that can be applied. Drupal Core or Rules actions can be used. This package provides the following...

Drupal Views Bulk Operations Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Views Bulk Operations is one of the third-party modules used to change views on nodes. An access bypass vulnerability exists in the Drupal Views Bulk Operations module in version 6.x-1....

CVE-2015-5460: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in app/views/events/menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification...

Administration Views - Critical - Information Disclosure - SA-CONTRIB-2015-132

Administration Views module replaces overview/listing pages with actual views for superior usability. The module does not check access properly under certain circumstances. Anonymous users could get access to read information they should not have access to. CVE identifiers issued CVE-2015-7226...

Fedora Update for drupal7-views FEDORA-2015-7329

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ad Fraud Malware Updating Flash on Infected PCs

Ad fraud malware is one of the more profitable specialties in the cybercrime world, and the attackers who use it often have to adapt their tactics in order to keep the money rolling in. One of the tactics that they have adopted in recent months is that of updating the version of Flash that’s...

Views Bulk Operations - Moderately critical - Access Bypass - SA-CONTRIB-2015-131

The Views Bulk Operations module enables you to add bulk operations to administration views, executing actions on multiple selected rows. The module doesn't sufficiently guard user entities against unauthorized modification. If a user has access to a user account listing view with VBO enabled suc...

Drupal Administration Views Module Access Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP. An access bypass vulnerability exists in the Drupal Administration Views module, which allows an attacker to obtain sensitive information...

Fedora 20 : drupal7-views-3.11-1.fc20 (2015-7302)

Release 3.11 is a security fix release - Upstream changelog is at https://www.drupal.org/node/2480259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 22 : drupal7-views-3.11-1.fc22 (2015-7329)

Release 3.11 is a security fix release - Upstream changelog is at https://www.drupal.org/node/2480259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...