Lucene search
K

42 matches found

NVD
NVD
added 2026/05/19 11:16 p.m.6 views

CVE-2026-8491

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1...

3.7CVSS0.00037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 9:42 p.m.3 views

CVE-2026-4933

A flaw was found in Drupal's Unpublished Node Permissions module. This incorrect authorization vulnerability allows an attacker to bypass intended access controls, potentially enabling them to view unpublished content through forceful browsing...

5.7AI score0.00051EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/26 9:31 p.m.3 views

EUVD-2026-16395

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0...

5.8AI score0.00051EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 9:17 p.m.3 views

CVE-2026-4933

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0...

7.5CVSS0.00051EPSS
Exploits0References1
CVE
CVE
added 2026/03/26 8:10 p.m.2 views

CVE-2026-4933

In Drupal, Unpublished Node Permissions had an Incorrect Authorization vulnerability that enables Forceful Browsing in unpublished content. Affected component: Unpublished Node Permissions; versions from 0.0.0 up to, but not including, 1.7.0. Root cause is unauthorized access to unpublished nodes...

7.5CVSS5.8AI score0.00051EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/26 8:10 p.m.1 views

CVE-2026-4933 Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-029

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0...

5.9AI score0.00051EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:10 p.m.2 views

CVE-2026-4933

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0...

5.8AI score0.00051EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/26 8:10 p.m.18 views

CVE-2026-4933 Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-029

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0...

0.00051EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

Drupal Unpublished Node Permissions 安全漏洞

Drupal Unpublished Node Permissions is an extension developed by Drupal Corporation that allows for controlling access to unpublished content. Versions of Drupal Unpublished Node Permissions prior to 1.7.0 contained security vulnerabilities; these vulnerabilities were due to improper authorizatio...

7.5CVSS5.8AI score0.00051EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.2 views

PT-2026-28676

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 1.7.0 Description An incorrect authorization issue exists in Drupal’s Unpublished Node Permissions, allowing forceful browsing. The problem relates to inconsistent access control for unpublished translated nodes. The...

5.9AI score0.00051EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2026/02/17 9:32 a.m.2 views

nodejs: Nodejs file permissions bypass

A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...

9.1CVSS5.9AI score0.00016EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-5476

Malware in sbrugna...

3.5CVSS6.4AI score0.0017EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-5435

Malware in sbrugna...

4.3CVSS6.4AI score0.00208EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-8168

Malware in sbrugna...

7.8CVSS7.6AI score0.00028EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-21847

Malware in sbrugna...

8.8CVSS8.6AI score0.00046EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2013-1961

Malware in sbrugna...

4CVSS6.4AI score0.00246EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-5471

Malware in sbrugna...

4.3CVSS6.4AI score0.00214EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 3:49 p.m.5 views

CVE-2020-16202

WebAccess Node All versions prior to 9.0.1 has incorrect permissions set for resources used by specific services, which may allow code execution with system privileges...

7.8CVSS7.5AI score0.00028EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:23 a.m.3 views

CVE-2012-5584

The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block...

4.3CVSS7AI score0.00214EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:18 a.m.5 views

CVE-2012-5589

The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link...

3.5CVSS6.7AI score0.0017EPSS
Exploits0References1
Rows per page
Query Builder