Archive
June 2015
Vulnerabilities first published in this month (UTC), newest first.
495 results · Feed
-
Unscored —
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, whe…
-
Unscored —
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cau…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfe…
-
Unscored —
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6 for Drupal allows remot…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hij…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7…
-
Unscored —
The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction a…
-
Unscored —
Open redirect vulnerability in the finder_form_goto function in the Finder module for Drupal allows remote attackers to…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Dr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 fo…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hija…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated use…
-
Unscored —
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Dr…
-
Unscored —
The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in plaintext when the "Ask user …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack th…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in includes/campaignmonitor_lists.admin.inc in the Campaign …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticate…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users …
-
Unscored —
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x befo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x be…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x bef…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages in the EntityBulkDelete module …
-
Unscored —
The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player admini…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Dru…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote auth…
-
Unscored —
The Open Graph Importer (og_tag_importer) 7.x-1.x for Drupal does not properly check the create permission for content …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the User Import module 6.x-4.x before 6.x-4.4 and 7.x-2.x…
-
Unscored —
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ubercart Webform Integration module before 6.x-1.8 and 7.x before 7.x-2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x befo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to…