CVE

Id
81653  
CVE No.
CVE-2015-4376  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733315 81653 CVE-2015-4376 MLIST:[oss-security] 20150322 CVE requests for Drupal contributed modules  View
733316 81653 CVE-2015-4376 URL:http://www.openwall.com/lists/oss-security/2015/03/22/35  View
733317 81653 CVE-2015-4376 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733318 81653 CVE-2015-4376 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733319 81653 CVE-2015-4376 MISC:https://www.drupal.org/node/2455011  View
733320 81653 CVE-2015-4376 CONFIRM:https://www.drupal.org/node/2454383  View
733321 81653 CVE-2015-4376 BID:73223  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8200 JVNDB-2015-003520 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 Adobe Flash Player および Adobe AIR には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-4428 81653 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003520.html  View