Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.0 CVE-2015-4393 The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authenticated users with the "Save …

Services Patch available Fix from $1,6002015-06-15 MEDIUM 5.0 CVE-2015-4394 The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction and obtain sensitive private fi…

Services Patch available Fix from $1,6002015-06-15 HIGH 7.5 CVE-2014-9152 The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, wh…

Services after 7.x-3.9 Fix from $1,9502014-12-01 HIGH 7.5 CVE-2014-9151 The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier for remote …

Services Mitigation only Fix from $1,9502014-12-01 MEDIUM 6.8 CVE-2013-2158 Cross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to hijac… Services Mitigation only Fix from $1,6002013-07-01