Search criteria
6 vulnerabilities found for views_bulk_operations by karim_ratib
FKIE_CVE-2010-5277
Vulnerability from fkie_nvd - Published: 2012-10-07 20:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| karim_ratib | views_bulk_operations | 6.x-1.0 | |
| karim_ratib | views_bulk_operations | 6.x-1.1 | |
| karim_ratib | views_bulk_operations | 6.x-1.2 | |
| karim_ratib | views_bulk_operations | 6.x-1.3 | |
| karim_ratib | views_bulk_operations | 6.x-1.4 | |
| karim_ratib | views_bulk_operations | 6.x-1.5 | |
| karim_ratib | views_bulk_operations | 6.x-1.6 | |
| karim_ratib | views_bulk_operations | 6.x-1.7 | |
| karim_ratib | views_bulk_operations | 6.x-1.8 | |
| karim_ratib | views_bulk_operations | 6.x-1.9 | |
| drupal | drupal | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A5B337BA-2904-4D32-BB31-4395FDE73E8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4F4D6AED-090F-4883-8140-1EF244757D59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3B467064-1F6E-4571-92A6-6AAA599382DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "CDE0970F-3691-4344-ADEB-75F02B694522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "54E93443-9E9C-44D3-9B3F-70CAA28A9E23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "70B14BEA-01AD-4B04-8A80-F3E6C3C248F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "6DA88107-F52F-4D5E-AED6-7FDC25CD0194",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "A0A61CE1-AE82-4EB9-A53F-1B0FFC7AC911",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "76BD193B-10B3-44D3-B9E3-EADD1D5CF121",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "E644713B-A81A-421A-A6B4-8EC7422FFCFE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B1170D-AD33-4C7A-892D-63AC71B032CF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el m\u00f3dulo Views Bulk Operations v6 antes de v6.x-1.10 para Drupal, permite a usuarios remotos autenticados con permisos de administraci\u00f3n de usuario evitar restricciones de acceso y eliminar usuarios an\u00f3nimos (usuarios 0) a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2010-5277",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 6.8,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-10-07T20:55:00.847",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://drupal.org/node/933596"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/933960"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/41696"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://drupal.org/node/933596"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/933960"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/41696"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2009-2237
Vulnerability from fkie_nvd - Published: 2009-06-27 18:47 - Updated: 2025-04-09 00:30
Severity ?
Summary
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| drupal | drupal | * | |
| karim_ratib | views_bulk_operations | 5.x-1.0 | |
| karim_ratib | views_bulk_operations | 5.x-1.1 | |
| karim_ratib | views_bulk_operations | 5.x-1.2 | |
| karim_ratib | views_bulk_operations | 5.x-1.3 | |
| karim_ratib | views_bulk_operations | 6.x-1.0 | |
| karim_ratib | views_bulk_operations | 6.x-1.1 | |
| karim_ratib | views_bulk_operations | 6.x-1.2 | |
| karim_ratib | views_bulk_operations | 6.x-1.3 | |
| karim_ratib | views_bulk_operations | 6.x-1.4 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
"matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2449F487-D201-4013-B0D4-3D83265E7F56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "539260B1-1779-4020-9034-BF8E01D87652",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C8B77FCD-74E2-48E6-BEDD-702E7CAAF2FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "973F9818-ADD0-41C2-9F41-14346F3E5286",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A5B337BA-2904-4D32-BB31-4395FDE73E8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4F4D6AED-090F-4883-8140-1EF244757D59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3B467064-1F6E-4571-92A6-6AAA599382DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "CDE0970F-3691-4344-ADEB-75F02B694522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "54E93443-9E9C-44D3-9B3F-70CAA28A9E23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Views Bulk Operations 5.x-1.x antes de 5.x-1.4 y 6.x-1.x ante de 6.x-1.7, un modulo para Drupal, permite a atacantes remotos evitar las restricciones de acceso previstas y modificar \"nodos o clases de nodos\" mediante vectores desconocidos, probablemente relacionado con procedimientos registrados (alias acciones)."
}
],
"id": "CVE-2009-2237",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-06-27T18:47:59.203",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/468450"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35117"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://drupal.org/node/468450"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35117"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2010-5277 (GCVE-0-2010-5277)
Vulnerability from cvelistv5 – Published: 2012-10-07 20:00 – Updated: 2024-08-07 04:17
VLAI?
Summary
Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:17:10.166Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/43813"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://drupal.org/node/933596"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-10-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/43813"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://drupal.org/node/933596"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-5277",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"name": "http://drupal.org/node/933960",
"refsource": "MISC",
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"name": "http://drupal.org/node/933596",
"refsource": "CONFIRM",
"url": "http://drupal.org/node/933596"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-5277",
"datePublished": "2012-10-07T20:00:00",
"dateReserved": "2012-10-07T00:00:00",
"dateUpdated": "2024-08-07T04:17:10.166Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-2237 (GCVE-0-2009-2237)
Vulnerability from cvelistv5 – Published: 2009-06-27 18:00 – Updated: 2024-08-07 05:44
VLAI?
Summary
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:44:55.785Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35117"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35117"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-2237",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://drupal.org/node/468450",
"refsource": "CONFIRM",
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35117"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-2237",
"datePublished": "2009-06-27T18:00:00",
"dateReserved": "2009-06-27T00:00:00",
"dateUpdated": "2024-08-07T05:44:55.785Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-5277 (GCVE-0-2010-5277)
Vulnerability from nvd – Published: 2012-10-07 20:00 – Updated: 2024-08-07 04:17
VLAI?
Summary
Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:17:10.166Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/43813"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://drupal.org/node/933596"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-10-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/43813"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://drupal.org/node/933596"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-5277",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "viewsbulk-drupal-unspec-security-bypass(62316)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62316"
},
{
"name": "http://drupal.org/node/933960",
"refsource": "MISC",
"url": "http://drupal.org/node/933960"
},
{
"name": "41696",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/41696"
},
{
"name": "43813",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/43813"
},
{
"name": "http://drupal.org/node/933596",
"refsource": "CONFIRM",
"url": "http://drupal.org/node/933596"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-5277",
"datePublished": "2012-10-07T20:00:00",
"dateReserved": "2012-10-07T00:00:00",
"dateUpdated": "2024-08-07T04:17:10.166Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-2237 (GCVE-0-2009-2237)
Vulnerability from nvd – Published: 2009-06-27 18:00 – Updated: 2024-08-07 05:44
VLAI?
Summary
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:44:55.785Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35117"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35117"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-2237",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://drupal.org/node/468450",
"refsource": "CONFIRM",
"url": "http://drupal.org/node/468450"
},
{
"name": "viewsbulk-unspecified-security-bypass(50659)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50659"
},
{
"name": "35051",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35051"
},
{
"name": "35117",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35117"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-2237",
"datePublished": "2009-06-27T18:00:00",
"dateReserved": "2009-06-27T00:00:00",
"dateUpdated": "2024-08-07T05:44:55.785Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}