Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4327 State: PUBLISHED Published: 2015-08-20T00:00:00 Last Updated: 2024-08-06T06:11:12.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to an unspecified file, aka Bug ID CSCuv12542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76408 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40518 - http://www.securitytracker.com/id/1033332
CVE ID: CVE-2015-4328 State: PUBLISHED Published: 2015-08-20T00:00:00 Last Updated: 2024-08-06T06:11:12.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, as demonstrated by read or write operations on the Unified Communications lookup page, aka Bug ID CSCuv12552. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033329 - http://www.securityfocus.com/bid/76399 - http://tools.cisco.com/security/center/vie
www.securitytracker.com/id/1033329 - http://www.securityfocus.com/bid/76399 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40522
CVE ID: CVE-2015-4329 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:11:12.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76395 - http://www.securitytracker.com/id/1033329 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40523
CVE ID: CVE-2015-4330 State: PUBLISHED Published: 2015-09-02T16:00:00 Last Updated: 2024-08-06T06:11:12.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033442 - http://tools.cisco.com/security/center/viewAlert.x?alertId=40541
CVE ID: CVE-2015-4331 State: PUBLISHED Published: 2015-08-22T17:00:00 Last Updated: 2024-08-06T06:11:12.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=40553 - http://www.securitytracker.com/id/1033356
CVE ID: CVE-2015-4332 State: REJECTED Published: 2022-07-08T17:37:13 Last Updated: 2022-07-08T17:37:13 Description: No description available.
CVE ID: CVE-2015-4334 State: PUBLISHED Published: 2015-12-07T20:00:00 Last Updated: 2024-08-06T06:11:12.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers (OCS) when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive information via a 407 (aka Proxy Authentication Required) HTTP status code, as demonstrated when using NTLM authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032149 -
ntication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032149 - https://twitter.com/bugch3ck/status/591492380294979585 - https://bto.bluecoat.com/security-advisory/sa93
CVE ID: CVE-2015-4335 State: PUBLISHED Published: 2015-06-09T14:00:00 Last Updated: 2024-08-06T06:11:12.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/antirez/redis/commit/fdf9d455098f54f7666c702ae464e6ea21e25411 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162146.html - http://www.openwall.com/lists/oss-security/2015/06/04/8 - http://www.openwall.com/lists/oss-security/2015/06/04/12 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00014.html
p://www.openwall.com/lists/oss-security/2015/06/04/12 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00014.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162094.html - http://rhn.redhat.com/errata/RHSA-2015-1676.html - https://groups.google.com/forum/#%21msg/redis-db/4Y6OqK8gEyk/Dg-5cejl-eUJ - http://www.securityfocus.com/bid/75034 - http://www.openwall.com/lists/oss-security/2015/06/05/3 - https://security.gentoo.org/glsa/201702-16 - http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/ - http://www.debian.org/security/2015/dsa-3279
CVE ID: CVE-2015-4336 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T06:11:12.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames with shell metacharacters, as demonstrated by using the backup comments feature to create the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74943 - http://packetstormsecurity.com/files/132107/WordPress-XCloner-3.1.2-XSS-Command-Execution.html - http://www.vapid.dhs.org/advisory.php?v=121
CVE ID: CVE-2015-4337 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T06:11:12.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the excl_manual parameter in the xcloner_show page to wpadmin/plugins.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74943 - http://packetstormsecurity.com/files/132107/WordPress-XCloner-3.1.2-XSS-Command-Execution.html - http://www.vapid.dhs.org/advisory.php?v=121
CVE ID: CVE-2015-4338 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T06:11:12.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LM_FRONT_* field for a language, as demonstrated by language/italian.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74943 - http://packetstormsecurity.com/files/132107/WordPress-XCloner-3.1.2-XSS-Command-Execution.html - http://www.vapid.dhs.org/advisory.php?v=121
CVE ID: CVE-2015-4342 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T06:11:12.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=934187 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00052.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html - https://www.suse.com/security/cve/CVE-2015-4342.html - http://packetstormsecurity.com/files/132224/Cacti-SQL-Injec
tml - https://www.suse.com/security/cve/CVE-2015-4342.html - http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html - http://www.cacti.net/release_notes_0_8_8d.php - http://bugs.cacti.net/view.php?id=2571 - http://www.securitytracker.com/id/1032672 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html - http://www.securityfocus.com/bid/75108 - http://www.debian.org/security/2015/dsa-3295 - http://seclists.org/fulldisclosure/2015/Jun/19 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html
CVE ID: CVE-2015-4344 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Services Basic Authentication module 7.x-1.x through 7.x-1.3 for Drupal allows remote attackers to bypass intended resource restrictions via vectors related to page caching. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2444861 - https://www.drupal.org/node/2428851 - http://www.securityfocus.com/bid/72677
CVE ID: CVE-2015-4345 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72676 - https://www.drupal.org/node/2428857 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2428855 - https://www.drupal.org/node/2428863
CVE ID: CVE-2015-4346 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72807 - https://www.drupal.org/node/2437943 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2431717
CVE ID: CVE-2015-4347 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified path arguments. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2437969 - http://www.securityfocus.com/bid/72802 - http://www.openwall.com/lists/oss-security/2015/04/25/6
CVE ID: CVE-2015-4348 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72805 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437973
CVE ID: CVE-2015-4349 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72805 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437973
CVE ID: CVE-2015-4350 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the authentication of administrators for requests that delete (1) products, (2) ratings, or (3) categories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72798 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437977
CVE ID: CVE-2015-4351 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72817 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437981
CVE ID: CVE-2015-4352 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72817 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437981
CVE ID: CVE-2015-4353 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72811 - https://www.drupal.org/node/2437985 - http://www.openwall.com/lists/oss-security/2015/04/25/6
CVE ID: CVE-2015-4354 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ubercart Webform Integration module before 6.x-1.8 and 7.x before 7.x-2.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72812 - https://www.drupal.org/node/2463199 - https://www.drupal.org/node/2437991 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2463207
CVE ID: CVE-2015-4355 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72810 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2437993
CVE ID: CVE-2015-4356 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a webform. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2445297 - http://www.securityfocus.com/bid/72993 - https://www.drupal.or
rity/2015/04/25/6 - https://www.drupal.org/node/2445297 - http://www.securityfocus.com/bid/72993 - https://www.drupal.org/node/2445935
CVE ID: CVE-2015-4357 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title, which is used as the default title of a webform block. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2445295 - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-security/2015/04/25/6
95 - http://www.openwall.com/lists/oss-security/2015/03/22/35 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2445297 - http://www.securityfocus.com/bid/72993 - https://www.drupal.org/node/2445291 - https://www.drupal.org/node/2445935
CVE ID: CVE-2015-4358 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2438357 - https://www.drupal.org/node/2445953 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/72947
CVE ID: CVE-2015-4359 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with permission to create or edit taxonomy terms or nodes to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2465177 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2465179 - https://www.dru
465177 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2465179 - https://www.drupal.org/node/2465181 - http://www.securityfocus.com/bid/72961 - https://www.drupal.org/node/2445955
CVE ID: CVE-2015-4360 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete role-rules via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2465177 - https://www.drupal.org/node/2446157 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2465179 - http
.org/node/2446157 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2465179 - https://www.drupal.org/node/2465181 - http://www.securityfocus.com/bid/72961 - https://www.drupal.org/node/2445955
CVE ID: CVE-2015-4361 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete registration codes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2446157 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - http://www.securityfocus.com/bid/72961 - https://www.drupal.org/node/2445955
CVE ID: CVE-2015-4362 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in tracking_code.admin.inc in the Tracking Code module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that disable tracking codes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72958 - https://www.drupal.org/node/2450135 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2445961 - http://cgit.drupal
135 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2445961 - http://cgit.drupalcode.org/tracking_code/commit/?id=77c8c3d - https://www.drupal.org/node/2453079
CVE ID: CVE-2015-4363 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the finder_form_goto function in the Finder module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72959 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2445967
CVE ID: CVE-2015-4364 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in includes/campaignmonitor_lists.admin.inc in the Campaign Monitor module 7.x-1.0 for Drupal allow remote attackers to hijack the authentication of users for requests that (1) enable list subscriptions via a request to admin/config/services/campaignmonitor/lists/%/enable or (2) disable list subscriptions via a request to admin/config/services/campaignmonitor/lists/%/disable. NOTE: this refers to an issue in an independently developed Drupal module, and NOT an issue in
nmonitor/lists/%/disable. NOTE: this refers to an issue in an independently developed Drupal module, and NOT an issue in the Campaign Monitor software itself (described on the campaignmonitor.com web site). Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2452569 - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2449747 - http://www.securityfocus.com/bid/72953 - https://www.drupal.org/node/2445971
CVE ID: CVE-2015-4365 State: PUBLISHED Published: 2015-06-15T14:00:00 Last Updated: 2024-08-06T06:11:12.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/25/6 - https://www.drupal.org/node/2445973 - http://www.securityfocus.com/bid/72952