|
268001
|
- |
|
workbench_email_project
|
workbench_email
|
The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7230
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268002
|
- |
|
twitter_project
|
twitter
|
The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access permissions, which allows remote authenticated users to post tw…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7229
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268003
|
- |
|
restful_project
|
restful
|
The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using non-cookie authentication providers, which allows remote attackers to obtain sensi…
|
NVD-CWE-Other
|
CVE-2015-7228
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268004
|
- |
|
fieldable_panels_panes_project
|
fieldable_panels_panes
|
The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7227
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268005
|
- |
|
administration_views_project
|
administration_views
|
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to ob…
|
CWE-200
Information Exposure
|
CVE-2015-7226
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268006
|
5.3 |
MEDIUM
Network
|
multibit
|
multibit_hd
|
MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot …
|
CWE-697
Incorrect Comparison
|
CVE-2015-6964
|
2024-11-21 11:35 |
2023-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268007
|
9.8 |
CRITICAL
Network
|
boschsecurity
|
nbn-498_dinion2x_day\/night_ip_cameras_firmware
|
The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to …
|
CWE-91
Blind XPath Injection
|
CVE-2015-6970
|
2024-11-21 11:35 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268008
|
9.8 |
CRITICAL
Network
|
kaseya
|
virtual_system_administrator
|
Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers…
|
CWE-287
Improper Authentication
|
CVE-2015-6922
|
2024-11-21 11:35 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268009
|
8.8 |
HIGH
Network
|
kaseya
|
virtual_system_administrator
|
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote aut…
|
CWE-22
Path Traversal
|
CVE-2015-6589
|
2024-11-21 11:35 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268010
|
3.5 |
LOW
Adjacent
|
qemu
fedoraproject
novell
canonical
redhat
xen
arista
|
qemu
fedora
suse_linux_enterprise_server
suse_linux_enterprise_debuginfo
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
ubuntu_linux
enterprise_linu…
|
The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of ser…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-6815
|
2024-11-21 11:35 |
2020-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
