Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
entity api project entity api 7.x-1.2 vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2014-1398
The entity wrapper access API in the Entity API module 7.x-1.x prior to 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statistics properties via unspecified vectors.
Entity Api Project Entity Api 7.x-1.2
Entity Api Project Entity Api 7.x-1.1
Entity Api Project Entity Api 7.x-1.0
Fedoraproject Fedora 20
Fedoraproject Fedora 19
4
CVSSv2
CVE-2014-1399
The entity wrapper access API in the Entity API module 7.x-1.x prior to 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspecified vectors.
Entity Api Project Entity Api 7.x-1.0
Entity Api Project Entity Api 7.x-1.1
Entity Api Project Entity Api 7.x-1.2
Fedoraproject Fedora 20
Fedoraproject Fedora 19
4
CVSSv2
CVE-2014-1400
The entity_access API in the Entity API module 7.x-1.x prior to 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors.
Entity Api Project Entity Api 7.x-1.2
Entity Api Project Entity Api 7.x-1.0
Entity Api Project Entity Api 7.x-1.1
Fedoraproject Fedora 19
Fedoraproject Fedora 20
4
CVSSv2
CVE-2013-4273
The Entity API module 7.x-1.x prior to 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticated users to read the comments via unspecified vectors. NOTE: this identifier was SPLIT per ADT5 due to different researcher organizations. ...
Entity Api Project Entity Api 7.x-1.0
Entity Api Project Entity Api 7.x-1.1
5
CVSSv2
CVE-2013-7391
The Entity API module 7.x-1.x prior to 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote malicious users to read restricted entities via the (1) field, (2) header, or (3) footer of a View. NOTE: this identifier was SPLIT from CVE-2013-4273 per ...
Entity Api Project Entity Api 7.x-1.0
Entity Api Project Entity Api
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started