Archive
17 September 2015
Vulnerabilities first published on this day (UTC), newest first.
15 results · Feed
-
Unscored —
The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using no…
-
Unscored —
The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldab…
-
Unscored —
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path fr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 f…
-
Unscored —
The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not prope…
-
Unscored —
The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions…
-
Unscored —CVE-2015-7235 Public exploit
Multiple SQL injection vulnerabilities in dex_reservations.php in the CP Reservation Calendar plugin before 1.1.7 for W…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Impor…
-
Unscored —
The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user…
-
Unscored —
The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which all…
-
Unscored —
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 d…
-
Unscored —CVE-2015-4040 Public exploit
Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery C…
-
Unscored —
Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway be…
-
Unscored —CVE-2015-6962 Public exploit
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands v…