Vulnerabilities > Views Project

DATE CVE VULNERABILITY TITLE RISK
2015-08-18 CVE-2015-5490 Information Exposure vulnerability in Views Project Views
The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which allows remote attackers to bypass intended filters and obtain access to hidden content via unspecified vectors.
network
low complexity
views-project CWE-200
5.0
2015-04-21 CVE-2015-3379 Permissions, Privileges, and Access Controls vulnerability in Views Project Views
The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
network
low complexity
views-project CWE-264
4.0
2015-04-21 CVE-2015-3378 Unspecified vulnerability in Views Project Views
Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to the break lock page for edited views.
network
views-project
4.9
2013-03-27 CVE-2013-1887 Cross-Site Scripting vulnerability in Views Project Views
Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields.
network
high complexity
views-project drupal CWE-79
2.1