Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Nicholas Thompson Subscribe
Filtered by product Node Quick Find
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-1661 2 Drupal, Nicholas Thompson 2 Drupal, Node Quick Find 2017-08-16 5.0 MEDIUM N/A
The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature.