Skip to content
OpenAdvisories

Archive

17 September 2015

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using no…

  • Unscored —

    The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldab…

  • Unscored —

    The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path fr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 f…

  • Unscored —

    The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not prope…

  • Unscored —

    The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions…

  • Unscored —
    CVE-2015-7235 Public exploit

    Multiple SQL injection vulnerabilities in dex_reservations.php in the CP Reservation Calendar plugin before 1.1.7 for W…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Impor…

  • Unscored —

    The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user…

  • Unscored —

    The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which all…

  • Unscored —

    The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 d…

  • Unscored —
    CVE-2015-4040 Public exploit

    Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery C…

  • Unscored —

    Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway be…

  • Unscored —
    CVE-2015-6962 Public exploit

    SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands v…