27 June 2012

63 results · Feed

• Unscored —
  CVE-2012-2723

  Cross-site scripting (XSS) vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenti…

  Jun 27, 2012
• Unscored —
  CVE-2012-2705

  The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a…

  Jun 27, 2012
• Unscored —
  CVE-2012-2729

  Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal a…

  Jun 27, 2012
• Unscored —
  CVE-2012-2713

  Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Dr…

  Jun 27, 2012
• Unscored —
  CVE-2012-2730

  The Protected Node module 6.x-1.x before 6.x-1.6 for Drupal does not properly "protect node access when nodes are acces…

  Jun 27, 2012
• Unscored —
  CVE-2012-2728

  Multiple cross-site request forgery (CSRF) vulnerabilities in the Node Hierarchy module 6.x-1.x before 6.x-1.5 for Drup…

  Jun 27, 2012
• Unscored —
  CVE-2012-2719

  The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same I…

  Jun 27, 2012
• Unscored —
  CVE-2012-2712

  Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when su…

  Jun 27, 2012
• Unscored —
  CVE-2012-2725

  classes/Filter/WhitelistedExternalFilter.php in the Authoring HTML module 6.x-1.x before 6.x-1.1 for Drupal does not pr…

  Jun 27, 2012
• Unscored —
  CVE-2012-2703

  Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode…

  Jun 27, 2012
• Unscored —
  CVE-2012-2726

  Cross-site scripting (XSS) vulnerability in the Protest module 6.x-1.x before 6.x-1.2 or 7.x-1.x before 7.x-1.2 for Dru…

  Jun 27, 2012
• Unscored —
  CVE-2012-2722

  The node selection interface in the WYSIWYG editor (CKEditor) in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1…

  Jun 27, 2012
• Unscored —
  CVE-2012-2710

  Cross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content …

  Jun 27, 2012
• Unscored —
  CVE-2012-2706

  Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to i…

  Web / CMS
  Jun 27, 2012
• Unscored —
  CVE-2012-2711

  Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow…

  Jun 27, 2012
• Unscored —
  CVE-2012-2702

  The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, whi…

  Jun 27, 2012
• Unscored —
  CVE-2012-2707

  The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to…

  Jun 27, 2012
• Unscored —
  CVE-2012-2721

  The default views in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal do not properly check permissions…

  Jun 27, 2012
• Unscored —
  CVE-2012-2727

  Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data,…

  Jun 27, 2012
• Unscored —
  CVE-2012-2715

  Cross-site scripting (XSS) vulnerability in the themes_links function in template.php in the Amadou theme module 6.x-1.…

  Jun 27, 2012
• Unscored —
  CVE-2012-2731

  The Ubercart AJAX Cart 6.x-2.x before 6.x-2.1 for Drupal stores the PHP session id in the JavaScript settings array in …

  Jun 27, 2012
• Unscored —
  CVE-2012-2720

  The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, w…

  Jun 27, 2012
• Unscored —
  CVE-2012-2708

  Cross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules/hosting/task/hosting_task.m…

  Jun 27, 2012