CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3221 matches found

Drupal•added 2017/03/01 12:0 a.m.•12 views

Location Map - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-026

This module enables you to display one simple location map via Google Maps. The module doesn't sufficiently sanitize user input in the configuration text fields of the module allows any tags and does not respect text format configuration. This vulnerability is mitigated by the fact that an attack...

6.9AI score

SaveExploits0References11

Packet Storm•added 2017/02/25 12:0 a.m.•62 views

Joomla Sgpprojects 3.1 SQL Injection

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

0.6AI score

SaveExploits0

Packet Storm•added 2017/02/25 12:0 a.m.•58 views

Joomla Civicrm 1.6 SQL Injection

0.7AI score

SaveExploits0

Packet Storm•added 2017/02/25 12:0 a.m.•79 views

Joomla Profiler 1.4 SQL Injection

0.8AI score

SaveExploits0

Packet Storm•added 2017/02/25 12:0 a.m.•82 views

Joomla Fabrik 1.4 / 1.5 Cross Site Scripting

7.4AI score

SaveExploits0

Packet Storm•added 2017/02/24 12:0 a.m.•64 views

Joomla JaJobBoard 1.5 SQL Injection

0.1AI score

SaveExploits0

Packet Storm•added 2017/02/24 12:0 a.m.•62 views

Joomla Redshop 1.4 / 1.5 SQL Injection

0.1AI score

SaveExploits0

Drupal•added 2017/02/22 12:0 a.m.•12 views

Timezone Detect - Moderately Critical - Cross Site Request Forgery - SA-CONTRIB-2017-020

This module enables sites to automatically detect and set user timezones via JavaScript. The module does not sufficiently protect against Cross-Site Request Forgery CSRF: an attacker could use this vulnerability to manipulate a user's timezone setting. The security implication of this issue depen...

7AI score

SaveExploits0References11

Packet Storm•added 2017/02/20 12:0 a.m.•42 views

Joomla Docman 1.6 SQL Injection

0.1AI score

SaveExploits0

Packet Storm•added 2017/02/20 12:0 a.m.•43 views

Joomla DCRC 1.6 SQL Injection

0.1AI score

SaveExploits0

Packet Storm•added 2017/02/20 12:0 a.m.•49 views

Joomla Maxcomment 1.6 SQL Injection

0.4AI score

SaveExploits0

Packet Storm•added 2017/02/19 12:0 a.m.•64 views

Joomla DJCatalog2 1.5 SQL Injection

0.2AI score

SaveExploits0

Drupal•added 2017/02/15 12:0 a.m.•26 views

Search API Sorts - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-016

The Search API Sorts module allows the site administrator to configure custom sort options for their search results and expose the control interface via the core block system. The module doesn't sufficiently sanitise the name of the sort option which is displayed to users. This vulnerability is...

6.8AI score

SaveExploits0References14

seebug.org•added 2017/02/13 12:0 a.m.•101 views

Apache Tomcat denial of service vulnerability, CVE-2016-6817）

The HTTP/2 header parser entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible. This was fixed in revision 1765794. This issue was reported as 60232 on 10 October 2016 and the security implications identified by...

5CVSS8.2AI score0.0719EPSS

SaveExploits1

Drupal•added 2017/02/08 12:0 a.m.•14 views

OSF for Drupal - Less Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-014

This module enables administrators to use a user interface to create complex semantic queries that can be saved to be used in different locations of a Drupal instance that uses OSF. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance with Drupal Securi...

7AI score

SaveExploits0References12

Drupal•added 2017/02/08 12:0 a.m.•14 views

Acquia Content Hub - Moderately Critical - Access Bypass - SA-CONTRIB-2017-013

The Acquia Content Hub module enables the distribution and discovery of content from any source using the Acquia Content Hub service. The module allows rendering of any arbitrary entity, without performing the appropriate access check. Users browsing to a well crafted URL could access information...

7AI score

SaveExploits0References15

Drupal•added 2017/02/08 12:0 a.m.•21 views

Wetkit Omega - Moderately Critical - Access Bypass - SA-CONTRIB-2017-012

WetKit Omega 4.x is a modern, Sass and Compass enabled Drupal 7 theme powered by the Omega base theme. When using the Drupal page cache, some links intended for privileged users can get cached and displayed to users who shouldn't have access to them. This is mitigated by the fact that the...

7AI score

SaveExploits0References15

pentestnepal•added 2017/02/02 7:46 a.m.•22 views

I got emails - G Suite Vulnerability

After recent finding about Uber and SendGrid bug, I decided to check other third party applications that were also used for similar cases. During the investigation, some third party applications were found to be vulnerable including G Suite. The initial research of this vulnerability started when...

6.7AI score

SaveExploits0

Drupal•added 2017/02/01 12:0 a.m.•47 views

Better Exposed Filters - Less Critical - Cross Site Sscripting (XSS) - SA-CONTRIB-2017-009

The Better Exposed Filters module gives site builders more choices for rendering Views' exposed form elements. The module does not sufficiently sanitize taxonomy term descriptions when the "Include the term description" option is selected. This vulnerability is mitigated by the fact that an...

6.9AI score

SaveExploits0References12

Packet Storm•added 2017/01/29 12:0 a.m.•32 views

Adapt CMS 3.0.3 File Upload

7.4AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by