Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2014-031 - Webform Template - Access Bypass

By Drupal Security Team on 12 Mar 2014 at 20:30 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-031
Project: Webform Template (third-party module)
Version: 7.x
Date: 2014-March-12
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access Bypass

SA-CONTRIB-2014-030 - SexyBookmarks - Information Disclosure

By Drupal Security Team on 12 Mar 2014 at 14:16 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-030
Project: SexyBookmarks (third-party module)
Version: 6.x
Date: 2014-March-12
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Information Disclosure

SA-CONTRIB-2014-029 - Mime Mail - Access Bypass

By Drupal Security Team on 5 Mar 2014 at 17:57 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-029
Project: Mime Mail (third-party module)
Version: 6.x, 7.x
Date: 2014-March-05
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2014-028 - Masquerade - Access bypass

By Drupal Security Team on 5 Mar 2014 at 17:39 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-028
Project: Masquerade (third-party module)
Version: 6.x, 7.x
Date: 2014-March-05
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2014-027 - NewsFlash Theme - XSS

By Drupal Security Team on 5 Mar 2014 at 17:11 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-027
Project: NewsFlash (third-party theme)
Version: 6.x, 7.x
Date: 2014-March-05
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2014-026 - Mime Mail - Access bypass

By Drupal Security Team on 26 Feb 2014 at 19:13 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-026
Project: Mime Mail (third-party module)
Version: 6.x, 7.x
Date: 2014-February-26
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2014-025 - Open Omega - Access Bypass

By Drupal Security Team on 26 Feb 2014 at 17:23 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-025
Project: Open Omega (third-party theme)
Version: 7.x
Date: 2014-February-26
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2014-024 - Content Lock - CSRF

By Drupal Security Team on 26 Feb 2014 at 16:28 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-024
Project: Content locking (anti-concurrent editing) (third-party module)
Version: 6.x, 7.x
Date: 2014-February-26
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2014-023 - Project Issue File Review - XSS

By Drupal Security Team on 26 Feb 2014 at 16:10 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-023
Project: Project Issue File Review (third-party module)
Version: 6.x
Date: 2014-February-26
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2014-022 - Slickgrid - Access bypass

By Drupal Security Team on 19 Feb 2014 at 15:36 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2014-022
Project: Slickgrid (third-party module)
Version: 7.x
Date: 2014-February -22
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

Pages

Subscribe with RSS