CVE-2026-107266

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

CVE-2026-107266

The Drupal Views Share module (versions 0.0.0 to 2.0.1 ) is vulnerable to a Missing Authorization issue leading to Forceful Browsing . The root cause is that the module fails to sufficiently block access to view displays. While the actual views data is not displayed, an attacker who knows the spe...

CVE-2026-107266 Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

EUVD-2026-113570

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

CVE-2026-107266 Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

Drupal Views Share authorization issue vulnerability

Drupal Views Share versions 0.0.0 through 2.0.1 contain an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

CVE-2026-107266: Drupal Views Share: Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

EUVD-2015-3424

Malware in sbrugna...

EUVD-2011-4061

Malware in sbrugna...

EUVD-2015-3423

Malware in sbrugna...

EUVD-2019-0715

Malware in sbrugna...

EUVD-2015-5445

Malware in sbrugna...

EUVD-2022-5166

Malicious code in bioql PyPI...

CVE-2013-1887

Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...

CVE-2010-4519

Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

CVE-2024-13287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...

CVE-2024-13287

The Drupal Views SVG Animation module (versions 0.0.0 through 1.0.0 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently sanitize SVG files before embedding them into the HTML. This flaw allow...

SUSE CVE-2016-6212

The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...

CVE-2011-3373: Improper Neutralization of Input During Web Page Generation

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...