https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:09:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01214 bdu:2025-01214 https://cve.radiocsirt.org/vuln/bdu:2025-01214 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-045 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/monster_menus</p> <p>This module enables you to group nodes within pages that have a highly-granular, distributed permissions structure.</p> <p>A function which can be used by third-party code does not return valid data under certain rare circumstances. If the third-party code relies on this data to decide whether to grant access to content, it may grant more access than was intended.</p> <p>This vulnerability is only present in sites that have custom code calling the `mm_content_get_uids_in_group()` function with a single UID of zero (0) in the second parameter.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/monster_menus</p> <p>This module enables you to group nodes within pages that have a highly-granular, distributed permissions structure.</p> <p>A function which can be used by third-party code does not return valid data under certain rare circumstances. If the third-party code relies on this data to decide whether to grant access to content, it may grant more access than was intended.</p> <p>This vulnerability is only present in sites that have custom code calling the `mm_content_get_uids_in_group()` function with a single UID of zero (0) in the second parameter.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2024-045 https://cve.radiocsirt.org/vuln/euvd-2026-210011 EUVD-2026-210011 https://cve.radiocsirt.org/vuln/euvd-2026-210011 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13281 <p>Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.</p> <p>Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-13281 https://cve.radiocsirt.org/vuln/ghsa-x5v3-33m6-c266 <p>Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.</p> <p>Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.</p> https://cve.radiocsirt.org/vuln/ghsa-x5v3-33m6-c266 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3127 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3127