15 June 2015

67 results · Feed

• Unscored —
  CVE-2015-4390

  Multiple cross-site request forgery (CSRF) vulnerabilities in the User Import module 6.x-4.x before 6.x-4.4 and 7.x-2.x…

  Jun 15, 2015
• Unscored —
  CVE-2015-4348

  SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access…

  Web / CMS
  Jun 15, 2015
• Unscored —
  CVE-2015-4370

  Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authe…

  Jun 15, 2015
• Unscored —
  CVE-2015-4354

  Cross-site scripting (XSS) vulnerability in the Ubercart Webform Integration module before 6.x-1.8 and 7.x before 7.x-2…

  Jun 15, 2015
• Unscored —
  CVE-2015-4384

  Cross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3…

  Jun 15, 2015
• Unscored —
  CVE-2015-4350

  Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attacke…

  Web / CMS
  Jun 15, 2015
• Unscored —
  CVE-2015-4387

  Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x befo…

  Jun 15, 2015
• Unscored —
  CVE-2015-4358

  Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.…

  Jun 15, 2015
• Unscored —
  CVE-2015-4352

  Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to…

  Web / CMS
  Jun 15, 2015
• Unscored —
  CVE-2015-4376

  Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote…

  Jun 15, 2015
• Unscored —
  CVE-2015-4388

  Cross-site scripting (XSS) vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the…

  Jun 15, 2015
• Unscored —
  CVE-2015-4344

  The Services Basic Authentication module 7.x-1.x through 7.x-1.3 for Drupal allows remote attackers to bypass intended …

  Jun 15, 2015
• Unscored —
  CVE-2015-4356

  Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7…

  Jun 15, 2015
• Unscored —
  CVE-2015-4373

  Cross-site scripting (XSS) vulnerability in the OG tabs module before 7.x-1.1 for Drupal allows remote authenticated us…

  Jun 15, 2015
• Unscored —
  CVE-2015-4371

  Open redirect vulnerability in the Perfecto module before 7.x-1.2 for Drupal allows remote attackers to redirect users …

  Jun 15, 2015
• Unscored —
  CVE-2015-4397

  Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijac…

  Web / CMS
  Jun 15, 2015
• Unscored —
  CVE-2015-4360

  Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8…

  Jun 15, 2015
• Unscored —
  CVE-2015-4378

  Cross-site scripting (XSS) vulnerability in the Crumbs module 7.x-2.x before 7.x-2.3 for Drupal allows remote authentic…

  Jun 15, 2015
• Unscored —
  CVE-2015-4346

  Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send …

  Jun 15, 2015
• Unscored —
  CVE-2015-4366

  Cross-site scripting (XSS) vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with …

  Jun 15, 2015
• Unscored —
  CVE-2015-4359

  Multiple cross-site scripting (XSS) vulnerabilities in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x…

  Jun 15, 2015
• Unscored —
  CVE-2015-4393

  The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authe…

  Jun 15, 2015
• Unscored —
  CVE-2015-4362

  Cross-site request forgery (CSRF) vulnerability in tracking_code.admin.inc in the Tracking Code module 7.x-1.x before 7…

  Jun 15, 2015
• Unscored —
  CVE-2015-4345

  The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 fo…

  Jun 15, 2015
• Unscored —
  CVE-2015-4368

  The Commerce Ogone module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to complete the checkout for an ord…

  Jun 15, 2015
• Unscored —
  CVE-2015-4347

  Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject…

  Web / CMS
  Jun 15, 2015
• Unscored —
  CVE-2015-4377

  Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-…

  Jun 15, 2015