https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 06:23:02 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-205 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/views_share</p> <p>This module enables you to &#34;share&#34; a view display within another website via an iframe.</p> <p>The module doesn&#39;t sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance.</p> <p>This vulnerability is mitigated by the fact that an attacker must know the view and display IDs.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/views_share</p> <p>This module enables you to &#34;share&#34; a view display within another website via an iframe.</p> <p>The module doesn&#39;t sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance.</p> <p>This vulnerability is mitigated by the fact that an attacker must know the view and display IDs.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-205 https://db.gcve.eu/vuln/fkie_cve-2026-107266 <p>Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.</p> <p>Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107266 https://db.gcve.eu/vuln/ghsa-w828-mg5j-r2g3 <p>Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.</p> <p>Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.</p> https://db.gcve.eu/vuln/ghsa-w828-mg5j-r2g3