CT
Vendor
Chaos Tool Suite Project
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2015-7875 | CT Ctools Chaos Tool Suite Project | 7.5 | Aug 7 | ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar… |
| CVE-2015-6665 | CT Ctools Chaos Tool Suite Project | – | Aug 24 | Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject… |
| CVE-2015-4398 | CT Ctools Chaos Tool Suite Project | – | Jun 16 | Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary… |
| CVE-2015-4375 | CT Ctools Chaos Tool Suite Project | – | Jun 15 | The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities… |
| CVE-2013-1925 | CT Ctools Chaos Tool Suite Project | – | Jul 16 | The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content"… |
| CVE-2012-5559 | CT Ctools Chaos Tool Suite Project | – | Dec 3 | Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated… |
| CVE-2012-2082 | CT Ctools Chaos Tool Suite Project | – | Aug 14 | Cross-site scripting (XSS) vulnerability in the Chaos tool suite (aka CTools) module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments… |
| CVE-2010-2010 | CT Ctools Chaos Tool Suite Project | – | May 21 | Multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to inject arbitrary web script… |
| CVE-2010-1548 | CT Ctools Chaos Tool Suite Project | – | May 21 | The auto-complete functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal does not follow access restrictions, which allows remote authenticated… |
| CVE-2010-1547 | CT Ctools Chaos Tool Suite Project | – | May 21 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to hijack the… |
| CVE-2010-1546 | CT Ctools Chaos Tool Suite Project | – | May 21 | Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote authenticated users,… |