Lucene search
+L

42 matches found

OSV
OSV
added 2025/06/26 1:34 p.m.8 views

CVE-2025-6677 Paragraphs table - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-084

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Paragraphs table allows Cross-Site Scripting XSS.This issue affects Paragraphs table: from 2.0.0 before 2.0.5...

5.4CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/06/26 1:34 p.m.21 views

CVE-2025-6677 Paragraphs table - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-084

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Paragraphs table allows Cross-Site Scripting XSS.This issue affects Paragraphs table: from 2.0.0 before 2.0.5...

0.00186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/26 12:00 a.m.16 views

PT-2025-26966 · Drupal · Drupal Paragraphs

Name of the Vulnerable Software and Affected Versions: Drupal Paragraphs table versions 2.0.0 through 2.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in the Drupal Paragraphs table. This allows for...

5.4CVSS6.2AI score0.00186EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/06/26 12:00 a.m.11 views

Drupal Paragraphs table 安全漏洞

Drupal Paragraphs table is a table generation tool for the Drupal community. A security vulnerability exists in Drupal Paragraphs table versions prior to 2.0.5 that stems from improper input neutralization and could lead to a cross-site scripting attack...

5.4CVSS5.8AI score0.00186EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/25 6:43 p.m.12 views

DRUPAL-CONTRIB-2025-084

Project Paragraphs table provides a field for a collection table. The module doesn't sufficiently sanitise certain data attributes allowing Cross Site Scripting XSS attacks. This vulnerability is mitigated by the fact that an attacker must have a role with permission to enter HTML tags containing...

5.4CVSS5.9AI score0.00186EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/06/25 12:00 a.m.11 views

Drupal Paragraphs table module 2.0.0-2.0.4 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Paragraphs table versions 2.0.0-2.0.4...

5.4CVSS6.1AI score0.00186EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:00 a.m.10 views

The vulnerability of the Paragraphs module in the Drupal CMS system, related to deficiencies in access control, allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the Paragraphs module in the Drupal CMS system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

6.5CVSS5.4AI score0.0024EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/01/09 8:15 p.m.22 views

CVE-2024-13272

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2...

6.3CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/09 7:20 p.m.27 views

CVE-2024-13272 Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2...

0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 7:20 p.m.10 views

CVE-2024-13272 Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2...

6.9AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/09 7:20 p.m.7 views

CVE-2024-13272 Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2...

6.3CVSS6.6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.7 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Paragraphs table version 1.23.0 prior to version 2.0.0 through 2.0.2, which stems from insufficient granularity of access control vulnerabilities...

6.3CVSS6.9AI score0.0024EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/09/04 12:00 a.m.6 views

Drupal Paragraphs table module < 1.23.0,2.0.0-2.0.1 - Authenticated Multiple Vulnerabilities

Authenticated Multiple Vulnerabilities discovered by James Williams in WordPress Module Paragraphs table versions 1.23.0,2.0.0-2.0.1...

7AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/04 12:00 a.m.9 views

PT-2024-10356 · Drupal · Drupal Paragraphs Table

Name of the Vulnerable Software and Affected Versions: Drupal Paragraphs table versions 0.0.0 through 1.22.0 Drupal Paragraphs table versions 2.0.0 through 2.0.1 Description: The issue is related to insufficient granularity of access control in Drupal Paragraphs table, which allows content...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/07 2:15 a.m.12 views

CVE-2024-34624

Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

5.5CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/07 12:00 a.m.9 views

PT-2024-26041 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying paragraphs, which allows local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62, update to...

5.5CVSS6.9AI score0.00152EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/08/07 12:00 a.m.8 views

PT-2024-26039 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds write in appending paragraphs, which could allow local attackers to potentially execute arbitrary code with Samsung Notes privilege...

7.8CVSS8AI score0.00211EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/04 4:26 p.m.8 views

DRUPAL-CONTRIB-2022-038

The module adds a "Clone" tab to a node. When clicked, a new node is created and fields from the previous node are populated into the new fields. This module supports paragraphs, groups, and other referenced entities. The module has a vulnerability which allows attackers to bypass the protection ...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2018/10/31 5:53 p.m.7 views

DRUPAL-CONTRIB-2018-073

The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users. The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other...

6.8AI score
SaveExploits0References1
Drupal
Drupal
added 2018/10/31 12:00 a.m.11 views

Paragraphs - Moderately critical - Access Bypass - SA-CONTRIB-2018-073

The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users. The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other...

7.1AI score
SaveExploits0References9
Rows per page
Query Builder