Nicholasthompson's vulnerability footprint centers on a narrowly scoped product portfolio, specifically the Global Redirect offering, where the observed weakness class involves improper input validation in request handling. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nicholasthompson over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-2021MEDIUM Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers | Jun 25, 2012 | 5.8 | 22 | NO | NO |
CVE-2011-1661MEDIUM The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read | Apr 10, 2011 | 5.0 | 18 | NO | NO |
CVE-2010-4775MEDIUM The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted | Mar 23, 2011 | 5.0 | 18 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nicholasthompson.
Media articles that mention a CVE ID that affects a product developed by Nicholasthompson — matched by CVE ID, not by vendor name.