Show filters
488 Total Results
Displaying 201-210 of 488
Sort by:
Attacker Value
Unknown
CVE-2015-3233
Disclosure Date: June 22, 2015 (last updated October 05, 2023)
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-3232
Disclosure Date: June 22, 2015 (last updated October 05, 2023)
Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter.
0
Attacker Value
Unknown
CVE-2015-3231
Disclosure Date: June 22, 2015 (last updated October 05, 2023)
The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed by user 1 by reading the cache.
0
Attacker Value
Unknown
CVE-2015-3234
Disclosure Date: June 22, 2015 (last updated October 05, 2023)
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.
0
Attacker Value
Unknown
CVE-2015-2559
Disclosure Date: March 25, 2015 (last updated October 05, 2023)
Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.
0
Attacker Value
Unknown
CVE-2010-5312
Disclosure Date: November 24, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
0
Attacker Value
Unknown
CVE-2014-9016
Disclosure Date: November 24, 2014 (last updated October 05, 2023)
The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.
0
Attacker Value
Unknown
CVE-2014-9015
Disclosure Date: November 24, 2014 (last updated October 05, 2023)
Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server that supports both HTTP and HTTPS sessions.
0
Attacker Value
Unknown
CVE-2014-8734
Disclosure Date: November 12, 2014 (last updated October 05, 2023)
The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-7407
Disclosure Date: October 22, 2014 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
0
