2583 matches found
CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
CVE-2016-6212: Exposure of Sensitive Information to an Unauthorized Actor
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
Drupal Administration Views Module Access Privilege Bypass Vulnerability
Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Administration Views is one of the modules used to replace the administration overview or list pages. An access rights bypass vulnerability exists in the Drupal Administration Views...
Fedora Update for drupal7-views FEDORA-2016-fff25f75b4
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for drupal7-views FEDORA-2016-ed5f606dde
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Administration Views - Critical - Access bypass - SA-CONTRIB-2016-041
Administration Views module replaces overview/listing pages with actual views for superior usability. The module does not check access properly under certain circumstances. Anonymous users could get access to read information they should not have access to. CVE identifiers issued ACVE identifier...
[SECURITY] Fedora 23 Update: drupal7-views-3.14-1.fc23
You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...
Fedora 24 : drupal7-views (2016-fff25f75b4)
Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...
Fedora 23 : drupal7-views (2016-ed5f606dde)
Fixes Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036 Changes since 7.x-3.13 : - Adding field handlers for statistics fields - \2200309 by helmo: Changed invalid placeholder from 'handler' to 'extender'. - \2708535 by stefan.r: Allow users to sort on a specific language, showing it...
[SECURITY] Fedora 24 Update: drupal7-views-3.14-1.fc24
You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...
Drupal Views Megarow Module Access Bypass Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability in the Drupal Views Megarow module allows remote attackers to bypass security restrictions and perform unauthorized operations...
[SECURITY] Fedora 23 Update: kf5-kitemviews-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 addon with item views...
[SECURITY] Fedora 24 Update: kf5-kitemviews-5.24.0-1.fc24
KDE Frameworks 5 Tier 1 addon with item views...
Remote Code Execution (RCE) in Spring Security OAuth
When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for responsetype...
Views can allow unauthorized users to see Statistics information
More info at https://www.drupal.org/SA-CORE-2016-002...
Views can allow unauthorized users to see Statistics information
More info at https://www.drupal.org/SA-CORE-2016-002...
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002
Saving user accounts can sometimes grant the user all roles User module - Drupal 7 - Moderately Critical A vulnerability exists in the User module, where if some specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the...
Views - Less Critical - Access Bypass - SA-CONTRIB-2016-036
An access bypass vulnerability exists in the Views module, where users without the "View content count" permission can see the number of hits collected by the Statistics module for results in the view. This issue is mitigated by the fact that the view must be configured to show a "Content...
drupal -- multiple vulnerabilities
Drupal Security Team reports: Saving user accounts can sometimes grant the user all roles User module - Drupal 7 - Moderately Critical Views can allow unauthorized users to see Statistics information Views module - Drupal 8 - Less Critical...
CVE-2016-1700
extensions/renderer/runtimecustombindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via vectors related ...