Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Views Project Clear all filters
TI-2015-02989 CVE-2015-3379 · GHSA-7477-j2vf-36wv

The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for…

Priority LOW 21

The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain se…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01094 Published 2015-04-21 No fix listed CWE-264
TI-2015-02988 CVE-2015-3378 · GHSA-h7qx-h373-6ccg

Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2…

Priority LOW 26

Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01569 Published 2015-04-21 No fix listed
TI-2013-01664 CVE-2013-1887 · GHSA-2cmq-q2jm-35rx

Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before…

Priority LOW 15

Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.02046 Published 2013-03-27 No fix listed CWE-79