65 matches found
EUVD-2015-3424
Malware in sbrugna...
EUVD-2015-3423
Malware in sbrugna...
EUVD-2011-4061
Malware in sbrugna...
EUVD-2015-5445
Malware in sbrugna...
EUVD-2019-0715
Malware in sbrugna...
EUVD-2022-5166
Malicious code in bioql PyPI...
CVE-2013-1887
Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...
CVE-2010-4519
Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...
CVE-2010-4520
Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...
CVE-2024-13287
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...
CVE-2024-13287
The Drupal Views SVG Animation module (versions 0.0.0 through 1.0.0 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently sanitize SVG files before embedding them into the HTML. This flaw allow...
SUSE CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
PT-2019-6670
Name of the Vulnerable Software and Affected Versions Drupal Views Bulk Operations VBO module versions 6.x-1.0 through 6.x-1.10 Description The issue arises from the improper escaping of vocabulary help in the Drupal Views Bulk Operations VBO module when user tagging is enabled and the "Modify no...
CVE-2011-3373: Improper Neutralization of Input During Web Page Generation
Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...
Drupal Views access bypass vulnerability (CNVD-2017-221665)
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Views is one of the view components. An access bypass vulnerability exists in Drupal Views versions prior to 7.x-3.17. An attacker can exploit this vulnerability to bypass security...
PT-2016-6801
Name of the Vulnerable Software and Affected Versions Drupal Views module versions 7.x-3.x before 7.x-3.14 Drupal Views module in Drupal 8.x before 8.1.3 Description The issue might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information...
Open redirect
Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to t...
CVE-2015-3378
Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to t...
PT-2015-6198
Name of the Vulnerable Software and Affected Versions Drupal Views module versions prior to 6.x-2.18 Drupal Views module versions 6.x-3.x prior to 6.x-3.2 Drupal Views module versions 7.x-3.x prior to 7.x-3.10 Description The issue allows remote authenticated users to redirect users to arbitrary...
PT-2015-6199
Name of the Vulnerable Software and Affected Versions Drupal Views module versions prior to 6.x-2.18 Drupal Views module versions 6.x-3.x prior to 6.x-3.2 Drupal Views module versions 7.x-3.x prior to 7.x-3.10 Description The issue allows remote authenticated users to obtain sensitive information...