Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
autocomplete vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-6752
Cross-site scripting (XSS) vulnerability in the Search API Autocomplete module 7.x-1.x prior to 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or H...
Search Api Autocomplete Project Search Api Autocomplete 7.x-1.0
Search Api Autocomplete Project Search Api Autocomplete 7.x-1.2
Search Api Autocomplete Project Search Api Autocomplete 7.x-1.1
NA
CVE-2015-6659
SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x prior to 7.39 allows remote malicious users to execute arbitrary SQL commands via an SQL comment.
Drupal Drupal 7.0
Drupal Drupal 7.1
Drupal Drupal 7.10
Drupal Drupal 7.17
Drupal Drupal 7.18
Drupal Drupal 7.24
Drupal Drupal 7.25
Drupal Drupal 7.34
Drupal Drupal 7.35
Drupal Drupal 7.7
Drupal Drupal 7.8
Drupal Drupal 7.15
Drupal Drupal 7.16
Drupal Drupal 7.22
Drupal Drupal 7.23
Drupal Drupal 7.3
Drupal Drupal 7.30
Drupal Drupal 7.33
Drupal Drupal 7.5
Drupal Drupal 7.6
Drupal Drupal 7.11
Drupal Drupal 7.12
NA
CVE-2015-6658
Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x prior to 6.37 and 7.x prior to 7.39 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, related to uploading files.
Drupal Drupal 6.0
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.19
Drupal Drupal 6.2
Drupal Drupal 6.26
Drupal Drupal 6.27
Drupal Drupal 6.34
Drupal Drupal 6.35
Drupal Drupal 6.9
Drupal Drupal 6.1
Drupal Drupal 6.10
Drupal Drupal 6.17
Drupal Drupal 6.18
Drupal Drupal 6.24
Drupal Drupal 6.25
Drupal Drupal 6.32
Drupal Drupal 6.33
Drupal Drupal 6.7
Drupal Drupal 6.8
Drupal Drupal 7.0
Drupal Drupal 7.15
NA
CVE-2015-6660
The Form API in Drupal 6.x prior to 6.37 and 7.x prior to 7.39 does not properly validate the form token, which allows remote malicious users to conduct CSRF attacks that upload files in a different user's account via vectors related to "file upload value callbacks.&quo...
Drupal Drupal 6.0
Drupal Drupal 6.13
Drupal Drupal 6.14
Drupal Drupal 6.21
Drupal Drupal 6.22
Drupal Drupal 6.29
Drupal Drupal 6.3
Drupal Drupal 6.36
Drupal Drupal 6.4
Drupal Drupal 7.0
Drupal Drupal 7.11
Drupal Drupal 7.12
Drupal Drupal 7.13
Drupal Drupal 7.2
Drupal Drupal 7.20
Drupal Drupal 7.27
Drupal Drupal 7.28
Drupal Drupal 7.37
Drupal Drupal 7.38
Drupal Drupal 7.x-dev
Drupal Drupal 6.1
Drupal Drupal 6.10
NA
CVE-2015-6665
Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x prior to 7.39 and the Ctools module 6.x-1.x prior to 6.x-1.14 for Drupal allows remote malicious users to inject arbitrary web script or HTML via vectors involving a whitelisted HTML element, possibly rela...
Fedoraproject Fedora 22
Fedoraproject Fedora 21
Fedoraproject Fedora 23
Drupal Drupal 7.0
Drupal Drupal 7.15
Drupal Drupal 7.11
Drupal Drupal 7.12
Drupal Drupal 7.2
Drupal Drupal 7.20
Drupal Drupal 7.27
Drupal Drupal 7.28
Drupal Drupal 7.36
Drupal Drupal 7.37
Drupal Drupal 7.x-dev
Drupal Drupal 7.16
Drupal Drupal 7.17
Drupal Drupal 7.23
Drupal Drupal 7.24
Drupal Drupal 7.30
Drupal Drupal 7.33
Drupal Drupal 7.6
Drupal Drupal 7.7
NA
CVE-2015-6661
Drupal 6.x prior to 6.37 and 7.x prior to 7.39 allows remote malicious users to obtain sensitive node titles by reading the menu.
Drupal Drupal 6.0
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.2
Drupal Drupal 6.20
Drupal Drupal 6.27
Drupal Drupal 6.28
Drupal Drupal 6.34
Drupal Drupal 6.35
Drupal Drupal 7.0
Drupal Drupal 6.15
Drupal Drupal 6.16
Drupal Drupal 6.17
Drupal Drupal 6.23
Drupal Drupal 6.24
Drupal Drupal 6.30
Drupal Drupal 6.31
Drupal Drupal 6.6
Drupal Drupal 6.7
Drupal Drupal 7.14
Drupal Drupal 7.15
Drupal Drupal 7.21
NA
CVE-2015-4375
The Chaos tool suite (ctools) module 7.x-1.x prior to 7.x-1.7 for Drupal allows remote malicious users to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.
Chaos Tool Suite Project Ctools 7.x-1.6
Chaos Tool Suite Project Ctools 7.x-1.1
Chaos Tool Suite Project Ctools 7.x-1.0
Chaos Tool Suite Project Ctools 7.x-1.4
Chaos Tool Suite Project Ctools 7.x-1.2
Chaos Tool Suite Project Ctools 7.x-1.5
Chaos Tool Suite Project Ctools 7.x-1.3
NA
CVE-2015-4418
Zoho NetFlow Analyzer build 10250 and previous versions does not have an off autocomplete attribute for a password field, which makes it easier for remote malicious users to obtain access by leveraging an unattended workstation.
Zohocorp Manageengine Netflow Analyzer -
NA
CVE-2014-4776
IBM License Metric Tool 9 prior to 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote malicious users to obtain access by leveraging an unattended workstation.
Ibm License Metric Tool 9.0
Ibm License Metric Tool 9.0.1
Ibm License Metric Tool 9.1.0.1
NA
CVE-2015-2767
Unspecified vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."
Websense Triton Ap Email
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
command injection
CVE-2021-47511
CVE-2024-26238
CVE-2024-4858
CVE-2024-21305
XXE
CVE-2021-47555
CVE-2021-47526
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »