CVE-2026-107266

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

CVE-2026-107266

The Drupal Views Share module (versions 0.0.0 to 2.0.1 ) is vulnerable to a missing authorization issue that allows forceful browsing . Because the module fails to sufficiently block access to view displays, an attacker who knows the specific view and display IDs can execute resource-intensive vi...

EUVD-2026-113570

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

EUVD-2015-3423

Malware in sbrugna...

EUVD-2019-0715

Malware in sbrugna...

EUVD-2015-3424

Malware in sbrugna...

EUVD-2011-4061

Malware in sbrugna...

EUVD-2015-5445

Malware in sbrugna...

EUVD-2022-5166

Malicious code in bioql PyPI...

CVE-2013-1887

Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...

CVE-2010-4519

Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

CVE-2024-13287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...

CVE-2024-13287

The Drupal Views SVG Animation module (versions 0.0.0 through 1.0.0 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently sanitize SVG files before embedding them into the HTML. This flaw allow...

SUSE CVE-2016-6212

The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...

CVE-2011-3373: Improper Neutralization of Input During Web Page Generation

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...

PT-2019-6670

Name of the Vulnerable Software and Affected Versions Drupal Views Bulk Operations VBO module versions 6.x-1.0 through 6.x-1.10 Description The issue arises from the improper escaping of vocabulary help in the Drupal Views Bulk Operations VBO module when user tagging is enabled and the "Modify no...

Drupal Views access bypass vulnerability (CNVD-2017-221665)

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Views is one of the view components. An access bypass vulnerability exists in Drupal Views versions prior to 7.x-3.17. An attacker can exploit this vulnerability to bypass security...

PT-2016-6801

Name of the Vulnerable Software and Affected Versions Drupal Views module versions 7.x-3.x before 7.x-3.14 Drupal Views module in Drupal 8.x before 8.1.3 Description The issue might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information...

Open redirect

Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to t...