Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5479 State: PUBLISHED Published: 2016-04-19T14:00:00 Last Updated: 2024-08-06T06:50:02.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html - https://libav.org/releases/libav-11.5.changelog - http://www.ubuntu.com/usn/USN-2944-1 - https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba/ - http://www.
u.com/usn/USN-2944-1 - https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba/ - http://www.securityfocus.com/bid/75932 - https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299b
CVE ID: CVE-2015-5481 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter in the gdbbpress_attachments page to wp-admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gd-bbpress-attachments/changelog/ - https://wpvulndb.com/vulnerabilities/8088 - https://security.dxw.com/advisories/reflected-xss-in-gd-bbpress-attachments-allows-an-attacke
com/vulnerabilities/8088 - https://security.dxw.com/advisories/reflected-xss-in-gd-bbpress-attachments-allows-an-attacker-to-do-almost-anything-an-admin-can/ - http://packetstormsecurity.com/files/132657/WordPress-GD-bbPress-Attachments-2.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2015/Jul/53
CVE ID: CVE-2015-5482 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the tab parameter in the gdbbpress_attachments page to wp-admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gd-bbpress-attachments/changelog/ - https://wpvulndb.com/vulnerabilities/8087 - https://security.dxw.com/advisories/local-file-include-vulnerability-in-gd-bbpress-attachme
b.com/vulnerabilities/8087 - https://security.dxw.com/advisories/local-file-include-vulnerability-in-gd-bbpress-attachments-allows-attackers-to-include-arbitrary-php-files/ - https://packetstormsecurity.com/files/132656/wpgdbbpress-lfi.txt
CVE ID: CVE-2015-5483 State: PUBLISHED Published: 2020-01-28T19:09:18 Last Updated: 2024-08-06T06:50:02.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add users, (2) delete posts, or (3) modify PHP files via unspecified vectors, or (4) conduct cross-site scripting (XSS) attacks via the po_logo parameter in the privateonly.php page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133349/WordPress-
Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133349/WordPress-Private-Only-3.5.1-CSRF-Cross-Site-Scripting.html - https://security.dxw.com/advisories/csrfxss-vulnerability-in-private-only-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/ - http://seclists.org/fulldisclosure/2015/Aug/77
CVE ID: CVE-2015-5484 State: PUBLISHED Published: 2020-01-15T15:31:06 Last Updated: 2024-08-06T06:50:02.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post. Additional Analyst Notes: - CVE Program Container: References: - https://security.dxw.com/advisories/stored-xss-in-plotly-allows-less-privileged-users-to-insert-arbitrary-javascript-into-posts/ - http://seclists.org/fulldisclosure/2015/Jul/68 - https://wordpress.org/plugins/wp-plotly/changelog/
CVE ID: CVE-2015-5485 State: PUBLISHED Published: 2015-08-18T15:00:00 Last Updated: 2024-08-06T06:50:02.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Event Import page (import-eventbrite-events.php) in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://security.dxw.com/advisories/reflected-xss-in-the-events-calendar-eventbrite-tickets-allows-unauthenticated-users-to-do-almost-anything-an-admin-can/ - http://seclists.org/fulldi
alendar-eventbrite-tickets-allows-unauthenticated-users-to-do-almost-anything-an-admin-can/ - http://seclists.org/fulldisclosure/2015/Jul/67 - https://theeventscalendar.com/release-eventbrite-tickets-3-10-2/ - http://packetstormsecurity.com/files/132676/The-Events-Calender-Eventbrite-Tickets-3.9.6-Cross-Site-Scripting.html
CVE ID: CVE-2015-5487 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3 for Drupal allows remote authenticated users with the "view meta information" permission to inject arbitrary web script or HTML via unspecified vectors related to the meta access tab. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2480169 - https://www.drupal.org/node/2480171 - http://www.securityfocus.com/bid/74465 - http://www.openwall.com/lists/oss-security/201
://www.drupal.org/node/2480171 - http://www.securityfocus.com/bid/74465 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2480241
CVE ID: CVE-2015-5488 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2480253 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2480173
CVE ID: CVE-2015-5489 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2480321 - https://www.drupal.org/node/2480289 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5490 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which allows remote attackers to bypass intended filters and obtain access to hidden content via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2480327 - https://www.drupal.org/node/2480259 - https://www.drupal.org/node/2475669 - http://www.securityfocus.com/bid/74462 - http://www.openwall.c
.org/node/2480259 - https://www.drupal.org/node/2475669 - http://www.securityfocus.com/bid/74462 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - http://cgit.drupalcode.org/views/commit/?id=cef693b
CVE ID: CVE-2015-5491 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the "administer ddblock" permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2484157 - https://www.drupal.org/node/2504965 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5492 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2484195 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5493 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which allows remote attackers to obtain access to certain entityforms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2483687 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2484169
CVE ID: CVE-2015-5494 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2484231 - https://www.drupal.org/node/2442741 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5495 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer menu" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2484213 - https://www.drupal.org/node/2484233 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5496 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74755 - https://www.drupal.org/node/2492205 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5497 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2487542 - https://www.drupal.org/node/2487548 - https://www.drupal.org/node/2492209 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5498 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview (admin/shipwire/shipments), which allows remote attackers to obtain sensitive information via a request to the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2492243 - https://www.drupal.org/node/2487580 - http://www.securityfocus.com/bid/74757 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5499 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2492245 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5500 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2492245 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5501 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attackers to execute arbitrary PHP code via a crafted file in the directory used to write Apache vhost files for hosted sites in a multi-site environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2492317 - http://www.securityfocus.com/bid/74759 - http://community.aegirproject.org/3.0-beta2 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - http://community.a
tp://community.aegirproject.org/3.0-beta2 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - http://community.aegirproject.org/2.4
CVE ID: CVE-2015-5502 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to Storage API fields attached to entities that are not nodes, which allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74867 - https://www.drupal.org/node/2495895 - https://www.drupal.org/node/2495903 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5503 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2495929 - https://www.drupal.org/node/2495931 - http://www.securityfocus.com/bid/74871 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5504 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2499787 - http://www.securityfocus.com/bid/75040 - http://www.securityfocus.com/bid/75039 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5505 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the "include subdomains" directive, which causes the HSTS policy to not be applied to subdomains and allows man-in-the-middle attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2507563 - https://www.drupal.org/node/2507539 - http://www.securityfocus.com/bid/75276 - http://www.openwall.com/list
de/2507563 - https://www.drupal.org/node/2507539 - http://www.securityfocus.com/bid/75276 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2507543 - http://www.securitytracker.com/id/1037633
CVE ID: CVE-2015-5506 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2489890 - http://www.securityfocus.com/bid/75275 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2507581
CVE ID: CVE-2015-5507 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2507593 - http://www.securityfocus.com/bid/75283 - https://www.drupal.org/node/2507605 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5508 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2507619 - http://www.securityfocus.com/bid/75277 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5509 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2430043 - http://www.securityfocus.com/bid/75278 - https://www.drupal.org/node/2507645 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5510 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2507753 - http://www.securityfocus.com/bid/75281 - https://www.drupal.org/node/2507763 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5511 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social login. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2511200 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2511410 - http://www.securityfocus.com/bid/75412
CVE ID: CVE-2015-5512 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2511378 - http://cgit.drupalcode.org/me/commit/?id=e28e5bf - https://www.drupal.org/node/2511386 - https://www.drupal.org/node/2511424 - http://www.securityfocus.com/bid/75413 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5513 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with the "Administer blocks" permission to inject arbitrary web script or HTML via unspecified vectors related to a login link. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2511518 - https://www.drupal.org/node/2511278 - https://www.drupal.org/node/2511280 - http://www.openwall.com/lists/oss-security/2015/0
://www.drupal.org/node/2511278 - https://www.drupal.org/node/2511280 - http://www.openwall.com/lists/oss-security/2015/07/04/4
CVE ID: CVE-2015-5514 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:50:02.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui submodule is enabled, allows user-assisted remote attackers to inject arbitrary web script or HTML via a destination field label. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2516678 - https://www.drupal.org/node/2516560 - http://www.openwall.com/lists/oss-security/2015/07/04/4