Login Request a demo
CT
Product
Ctools
by Chaos Tool Suite Project · last CVE Aug 7, 2017
11
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 0
Severity
All severities11Critical0High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ctools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-7875
7.5
1%
Aug 7
ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +33 more
CVE-2015-6665
–
3%
Aug 24
Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +16 more
CVE-2015-4398
–
1%
Jun 16
Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary…
Affected: through 6.x-1.11; 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; +2 more
CVE-2015-4375
–
1%
Jun 15
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities…
Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; 7.x-1.5; +2 more
CVE-2013-1925
–
2%
Jul 16
The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content"…
Affected: 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.0; +5 more
CVE-2012-5559
–
2%
Dec 3
Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +13 more
CVE-2012-2082
–
2%
Aug 14
Cross-site scripting (XSS) vulnerability in the Chaos tool suite (aka CTools) module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments…
Affected: 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.0; +2 more
CVE-2010-2010
–
1%
May 21
Multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to inject arbitrary web script…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +7 more
CVE-2010-1548
–
1%
May 21
The auto-complete functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal does not follow access restrictions, which allows remote authenticated…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +7 more
CVE-2010-1547
–
1%
May 21
Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to hijack the…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +7 more
CVE-2010-1546
–
1%
May 21
Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote authenticated users,…
Affected: 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; 6.x-1.0; +7 more
Showing 11