OWS Scald 7.x-1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ows:scald:7.x-1.0:*:*:*:*:*:*:*part: a version: 7.x-1.0 update: *
| Vendor | Ows (9b574420-893a-5fc0-935b-a2ac12ddb23e) |
|---|---|
| Product | Scald (c5064728-071a-53ba-909e-7d897a1bbdb3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/drupalprojects/scald |
purl2cpe | 2026-06-01 10:15:51.609792 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-7305 |
vulnerable | 2026-06-08 05:07:00.366012 |
Details available
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property information via vectors involving a "debug context."
Published: 2015-09-21T19:00:00.000Z
Updated: 2024-09-16T19:25:38.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5315 |
vulnerable | 2026-06-08 05:04:51.236198 |
Details available
Cross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module) in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than CVE-2013-4174.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T17:06:52.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4174 |
vulnerable | 2026-06-08 05:04:34.410306 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) flash_uri, (2) flash_width, or (3) flash_height in the scald_flash_scald_prerender function in providers/scald_flash/scald_flash.module; or the (4) caption in the scald_image_scald_prerender function in providers/scald_image/scald_image.module.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:38:00.163Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.