Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Danielb Clear all filters
TI-2012-05363 CVE-2012-6645 · GHSA-27c4-phc8-rm9h

Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder…

Priority LOW 25

Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary w…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02741 Published 2014-04-08 No fix listed CWE-79
TI-2012-01437 CVE-2012-1648 · GHSA-v943-qg78-x777

Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal…

Priority LOW 13

Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified ve…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01064 Published 2012-09-09 No fix listed CWE-79
TI-2012-01430 CVE-2012-1641 · GHSA-6fh4-5hj2-82mw

The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and…

Priority LOW 31

The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02292 Published 2012-08-28 No fix listed CWE-264