EUVD-2012-4412

Malware in sbrugna...

EUVD-2014-8578

Malware in sbrugna...

MAL-2024-2659 Malicious code in mf-seller-xp-commons-module-scanner (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

Malware in @manomano-internal/mf-seller-xp-commons-module-scanner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Siemens Mendix Workflow Commons Module Improper Access Control Vulnerability

Siemens Mendix Workflow Commons Module provides out-of-the-box content to help you get started building workflows in Mendix.A security vulnerability exists in Siemens Mendix Workflow Commons Module due to a failure of the affected module version to properly handle access control for certain modul...

CVE-2014-8747

CVE-2014-8747 is a cross-site scripting (XSS) vulnerability in Drupal Commons 7.x-3.x (prior to 7.x-3.9) for Drupal. The issue affects messages in the activity stream related to content creation, where unsanitized content could allow injection of arbitrary scripts/HTML. Root cause: inadequate san...

PT-2014-8706

Name of the Vulnerable Software and Affected Versions Drupal Commons module versions 7.x-3.x before 7.x-3.9 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via vectors related to content creation and activity stream messages...

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

Design/Logic Flaw

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

CVE-2012-4483

CVE-2012-4483 affects the Drupal Commons module (6.x-2.x) before 6.x-2.8. The underling root cause is that the function commons_discussion_views_default_views does not properly enforce node access restrictions, potentially allowing remote attackers to view sensitive information via the recent com...