Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2009-3786

Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Drupal Moshe Weitzman
Products
Drupal Og Vocab
CVE-2009-4528

The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors.

CVSS 2.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Drupal Moshe Weitzman
Products
Drupal Og Vocab