Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Danielb Component: Finder Clear all filters
TI-2012-05363 CVE-2012-6645 · GHSA-27c4-phc8-rm9h

Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary w…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02741 Published 2014-04-08 No fix listed CWE-79
TI-2012-01430 CVE-2012-1641 · GHSA-6fh4-5hj2-82mw

The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and…

Priority LOW 31

The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02292 Published 2012-08-28 No fix listed CWE-264