Md-systems

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Md-systems records in CISA KEV

No Md-systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Paragraphs 2 records LOW Simplenews 2 records LOW

Records

2 records in Simplenews · all components

TI-2012-02356 CVE-2012-2724 · GHSA-59qq-h9qc-fpvf

Information disclosure in Simplenews

LOW 29

The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02453 Published 2020-01-09 Fixed in 6.x-1.4, 6.x-2.0-alpha4 CWE-200

TI-2013-03899 CVE-2013-4447 · GHSA-9262-6whg-g7rv

Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x…

LOW 25

Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an email addres…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02688 Published 2013-11-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0