CVE-2025-4296 Open Redirect in HotelRunner's B2B

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing.This issue affects B2B: before 04.06.2025...

CVE-2025-7717

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1...

CVE-2025-7717 File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1...

CVE-2025-7717 File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1...

CVE-2025-7717

CVE-2025-7717 is a Missing Authorization vulnerability in the Drupal File Download module. The issue allows forceful browsing to access protected files due to insufficient access control. Affected versions are Drupal File Download 0.0.0–1.8.9 and 2.0.0 (inclusive); versions before 1.9.0 and befor...

CVE-2025-7717 File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1...

PT-2025-30312 · Drupal · Drupal File Download

Name of the Vulnerable Software and Affected Versions: Drupal File Download versions 0.0.0 through 1.8.9 Drupal File Download versions 2.0.0 through 2.0.0 Description: The File Download module is susceptible to a missing authorization issue, allowing for forceful browsing. Recommendations: Update...

CVE-2024-13175

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. This issue affects VOC TESTER: before 12.41.0...

CVE-2024-13175

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. This issue affects VOC TESTER: before 12.41.0...

CVE-2024-13175

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. This issue affects VOC TESTER: before 12.41.0...

CVE-2024-13175 IDOR in Vidco Software's VOC TESTER

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. This issue affects VOC TESTER: before 12.41.0...

CVE-2024-13175 IDOR in Vidco Software's VOC TESTER

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. This issue affects VOC TESTER: before 12.41.0...

CVE-2024-13175

CVE-2024-13175 affects Vidco Software VOC TESTER prior to version 12.41.0. The vulnerability is an authorization bypass via a user-controlled key that enables forceful browsing to access restricted areas. Multiple sources (Red Hat, CVE databases, PT Security) corroborate the issue and scope to VO...

CVE-2025-48916

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...

CVE-2025-48916 Bookable Calendar - Less critical - Access bypass - SA-CONTRIB-2025-070

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...

CVE-2025-48916

CVE-2025-48916 affects Drupal Bookable Calendar before 2.2.13. A missing/incorrect authorization check in the module allows forceful browsing (unauthenticated access/bypass) to vulnerable resources. Affected versions are 0.0.0 through 2.2.12; patch 2.2.13 or later is the recommended remediation. ...

CVE-2025-48916 Bookable Calendar - Less critical - Access bypass - SA-CONTRIB-2025-070

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...

CVE-2025-48916 Bookable Calendar - Less critical - Access bypass - SA-CONTRIB-2025-070

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...

PT-2025-25425 · Drupal · Drupal Bookable Calendar

Name of the Vulnerable Software and Affected Versions: Drupal Bookable Calendar versions 0.0.0 through 2.2.12 Description: The issue is related to a Missing Authorization vulnerability in Drupal Bookable Calendar, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.2.12,...

Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...