Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Simplenews Clear all filters
TI-2012-02356 CVE-2012-2724 · GHSA-59qq-h9qc-fpvf

Information disclosure in Simplenews

Priority LOW 29

The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02453 Published 2020-01-09 Fixed in 6.x-1.4, 6.x-2.0-alpha4 CWE-200
TI-2007-04699 CVE-2007-4873 · GHSA-8xmm-2h7f-547x

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access…

Priority LOW 26

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/db…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01491 Published 2007-09-27 No fix listed CWE-264