2042 matches found
CVE-2015-5509
The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors...
Drupal Administration Views Module Information Disclosure Vulnerability
Drupal is a free, open source content management system developed in PHP.Administration Views is a module for replacing administration overview or list pages. A security vulnerability exists in the Drupal Administration Views module that allows remote attackers to submit special requests to obtai...
Fedora 22 : drupal7-views_bulk_operations-3.3-1.fc22 (2015-11318)
7.x-3.3 See SA-CONTRIB-2015-131 Changes since 7.x-3.2: - Fix security vulnerability, by AdamPS. - Remove an entitylabel workaround that core no longer needs. - Issue 2427381 by axel.rutz: Rules component lacks entity type - Issue 2418751 by anrikun: Archive action fails silently - Issue 2318273 b...
Fedora 21 : drupal7-views_bulk_operations-3.3-1.fc21 (2015-11278)
7.x-3.3 See SA-CONTRIB-2015-131 Changes since 7.x-3.2: - Fix security vulnerability, by AdamPS. - Remove an entitylabel workaround that core no longer needs. - Issue 2427381 by axel.rutz: Rules component lacks entity type - Issue 2418751 by anrikun: Archive action fails silently - Issue 2318273 b...
[SECURITY] Fedora 22 Update: drupal7-views_bulk_operations-3.3-1.fc22
This module augments Views by allowing bulk operations to be executed on the displayed rows. It does so by showing a checkbox in front of each node, and adding a select box containing operations that can be applied. Drupal Core or Rules actions can be used. This package provides the following...
Drupal Views Bulk Operations Module Access Bypass Vulnerability
Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Views Bulk Operations is one of the third-party modules used to change views on nodes. An access bypass vulnerability exists in the Drupal Views Bulk Operations module in version 6.x-1....
Administration Views - Critical - Information Disclosure - SA-CONTRIB-2015-132
Administration Views module replaces overview/listing pages with actual views for superior usability. The module does not check access properly under certain circumstances. Anonymous users could get access to read information they should not have access to. CVE identifiers issued CVE-2015-7226...
Fedora Update for drupal7-views FEDORA-2015-7329
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ad Fraud Malware Updating Flash on Infected PCs
Ad fraud malware is one of the more profitable specialties in the cybercrime world, and the attackers who use it often have to adapt their tactics in order to keep the money rolling in. One of the tactics that they have adopted in recent months is that of updating the version of Flash that’s...
Views Bulk Operations - Moderately critical - Access Bypass - SA-CONTRIB-2015-131
The Views Bulk Operations module enables you to add bulk operations to administration views, executing actions on multiple selected rows. The module doesn't sufficiently guard user entities against unauthorized modification. If a user has access to a user account listing view with VBO enabled suc...
Drupal Administration Views Module Access Bypass Vulnerability
Drupal is a free and open source content management system developed in PHP. An access bypass vulnerability exists in the Drupal Administration Views module, which allows an attacker to obtain sensitive information...
Fedora 20 : drupal7-views-3.11-1.fc20 (2015-7302)
Release 3.11 is a security fix release - Upstream changelog is at https://www.drupal.org/node/2480259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 22 : drupal7-views-3.11-1.fc22 (2015-7329)
Release 3.11 is a security fix release - Upstream changelog is at https://www.drupal.org/node/2480259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 21 : drupal7-views-3.11-1.fc21 (2015-7326)
Release 3.11 is a security fix release - Upstream changelog is at https://www.drupal.org/node/2480259 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
[SECURITY] Fedora 22 Update: drupal7-views-3.11-1.fc22
The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...
Fedora Update for drupal7-views FEDORA-2015-7326
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for drupal7-views FEDORA-2015-7302
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Administration Views - Moderately Critical - Access Bypass - SA-CONTRIB-2015-122
This module replaces administrative overview/listing pages with Views for improved usability. When combined with other contributed or custom modules, the Administration Views module improperly grants users access to administration pages including the permissions page. This vulnerability is...
Views - Critical - Access Bypass - SA-CONTRIB-2015-103
The Views module provides a flexible method for Drupal site designers to control how lists and tables of content, users, taxonomy terms and other data are presented. Access bypass due cache inconsistency Due to an issue in the caching mechanism of Views it's possible that configured filters lose...
[SECURITY] Fedora 22 Update: drupal7-ctools-1.7-1.fc22
This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pages. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it includ...