Lucene search
K

11 matches found

Fedora
Fedora
added 2026/04/16 11:42 p.m.4 views

[SECURITY] Fedora 44 Update: kf6-knotifyconfig-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 module for KNotify configuration...

5.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-8979

Malware in sbrugna...

4CVSS6.4AI score0.00176EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:16 a.m.3 views

CVE-2014-9154

The Notify module 7.x-1.x before 7.x-1.1 for Drupal does not properly restrict access to 1 new or 2 modified nodes or 3 their fields, which allows remote authenticated users to obtain node titles, teasers, and fields by reading a notification email...

4CVSS6.6AI score0.00176EPSS
Exploits0References1
OSV
OSV
added 2023/12/31 1:15 p.m.0 views

CVE-2023-7186

A vulnerability was found in 7-card Fakabao up to 1.0build20230805. It has been declared as critical. This vulnerability affects unknown code of the file member/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be...

8.8CVSS5.6AI score
Exploits0References3
OSV
OSV
added 2019/05/21 6:29 p.m.1 views

CVE-2019-12252

In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges guest can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail&notifyTo=SOLFORWARD&id= substring...

6.5CVSS6.7AI score0.07041EPSS
Exploits4References4
NVD
NVD
added 2014/12/01 4:59 p.m.7 views

CVE-2014-9154

The Notify module 7.x-1.x before 7.x-1.1 for Drupal does not properly restrict access to 1 new or 2 modified nodes or 3 their fields, which allows remote authenticated users to obtain node titles, teasers, and fields by reading a notification email...

4CVSS6.2AI score0.00176EPSS
Exploits0References2
Prion
Prion
added 2014/12/01 4:59 p.m.9 views

Code injection

The Notify module 7.x-1.x before 7.x-1.1 for Drupal does not properly restrict access to 1 new or 2 modified nodes or 3 their fields, which allows remote authenticated users to obtain node titles, teasers, and fields by reading a notification email...

4CVSS6.7AI score0.00176EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2014/12/01 4:0 p.m.40 views

CVE-2014-9154

The CVE-2014-9154 entry concerns the Drupal Notify module (7.x-1.x) prior to version 7.x-1.1. The vulnerability arises because the module does not properly restrict access to new or modified nodes and their fields, enabling remote authenticated users to view node titles, teasers, and fields by re...

4CVSS6.4AI score0.00176EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2014/12/01 4:0 p.m.15 views

CVE-2014-9154

The Notify module 7.x-1.x before 7.x-1.1 for Drupal does not properly restrict access to 1 new or 2 modified nodes or 3 their fields, which allows remote authenticated users to obtain node titles, teasers, and fields by reading a notification email...

6.2AI score0.00176EPSS
Exploits0References2
Drupal
Drupal
added 2014/08/13 12:0 a.m.15 views

SA-CONTRIB-2014-078 - Notify - Access bypass

The notify module allows users to subscribe to periodic emails which include all new or revised content and/or comments of specific content types, much like the daily newsletters sent by some websites. The Notify module does not sufficiently check whether the user has access to recently added or...

4CVSS6.3AI score0.00176EPSS
Exploits0References10
Drupal
Drupal
added 2009/01/15 12:0 a.m.15 views

SA-CONTRIB-2009-004 - Notify - Privilege escalation

A user triggering the cron processing of the Notify module may end up getting logged in as another user when the Notify operations do not complete succesfully. Versions Affected Versions of Notify for Drupal 5.x prior to 5.x-1.2 Drupal core is not affected. If you do not use the Notify module,...

7.1AI score
Exploits0References3
Rows per page
Query Builder