|
272621
|
- |
|
drupalcommerce
|
commerce_commonwealth
|
The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, re…
|
CWE-20
Improper Input Validation
|
CVE-2015-7231
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272622
|
- |
|
workbench_email_project
|
workbench_email
|
The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7230
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272623
|
- |
|
twitter_project
|
twitter
|
The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access permissions, which allows remote authenticated users to post tw…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7229
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272624
|
- |
|
restful_project
|
restful
|
The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using non-cookie authentication providers, which allows remote attackers to obtain sensi…
|
NVD-CWE-Other
|
CVE-2015-7228
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272625
|
- |
|
fieldable_panels_panes_project
|
fieldable_panels_panes
|
The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7227
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272626
|
- |
|
administration_views_project
|
administration_views
|
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to ob…
|
CWE-200
Information Exposure
|
CVE-2015-7226
|
2024-11-21 11:36 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272627
|
5.3 |
MEDIUM
Network
|
multibit
|
multibit_hd
|
MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot …
|
CWE-697
Incorrect Comparison
|
CVE-2015-6964
|
2024-11-21 11:35 |
2023-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272628
|
9.8 |
CRITICAL
Network
|
boschsecurity
|
nbn-498_dinion2x_day\/night_ip_cameras_firmware
|
The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to …
|
CWE-91
Blind XPath Injection
|
CVE-2015-6970
|
2024-11-21 11:35 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272629
|
9.8 |
CRITICAL
Network
|
kaseya
|
virtual_system_administrator
|
Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers…
|
CWE-287
Improper Authentication
|
CVE-2015-6922
|
2024-11-21 11:35 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272630
|
8.8 |
HIGH
Network
|
kaseya
|
virtual_system_administrator
|
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote aut…
|
CWE-22
Path Traversal
|
CVE-2015-6589
|
2024-11-21 11:35 |
2020-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|