md-systems records
4 published records for vendor md-systems.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-862 Missing Authorization2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2026-13240No exploit | Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060md-systems · paragraphs · CWE-862 | Medium6.5 | — | 0.3% | Jul 10, 2026 |
26Monitor | CVE-2026-13241No exploit | Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061md-systems · paragraphs · CWE-862 | Medium6.5 | — | 0.3% | Jul 10, 2026 |
22Monitor | CVE-2012-2724No exploit | The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addmd-systems · simplenews · CWE-200 | Medium5.3 | — | 2.5% | Jan 9, 2020 |
18Monitor | CVE-2013-4447No exploit | Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal almd-systems · simplenews · CWE-79 | Medium4.3 | — | 2.7% | Nov 1, 2013 |
- CVE-2026-1324026Monitor
Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060
MediumCVSS 6.5No exploitEPSS 0%md-systems · paragraphsJul 10, 2026
- CVE-2026-1324126Monitor
Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061
MediumCVSS 6.5No exploitEPSS 0%md-systems · paragraphsJul 10, 2026
- CVE-2012-272422Monitor
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email add
MediumCVSS 5.3No exploitEPSS 2%md-systems · simplenewsJan 9, 2020
- CVE-2013-444718Monitor
Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal al
MediumCVSS 4.3No exploitEPSS 3%md-systems · simplenewsNov 1, 2013