Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF)

By Drupal Security Team on 7 Aug 2013 at 15:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-064
Project: Mozilla Persona (third-party module)
Version: 7.x
Date: 2013-August-07
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2013-063 - Authenticated User Page Caching (Authcache) - Information Disclosure

By Drupal Security Team on 7 Aug 2013 at 15:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-063
Project: Authenticated User Page Caching (Authcache) (third-party module)
Version: 7.x
Date: 2013-August-07
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Information Disclosure

SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass

By Drupal Security Team on 7 Aug 2013 at 15:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-062
Project: RESTful Web Services (third-party module)
Version: 7.x
Date: 2013-August-07
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2013-061 - Flippy - Access Bypass

By Drupal Security Team on 31 Jul 2013 at 15:02 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-061
Project: Flippy (third-party module)
Version: 7.x
Date: 2013-July-31
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2013-060 - Scald - Cross Site Scripting (XSS)

By Drupal Security Team on 24 Jul 2013 at 15:25 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-060
Project: Scald (third-party module)
Version: 6.x, 7.x
Date: 2013-July-24
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2013-059 - Hostmaster (Aegir) - Access Bypass

By Drupal Security Team on 17 Jul 2013 at 18:56 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-059
Project: Hostmaster (Aegir) (third-party module)
Version: 6.x
Date: 2013-July-17
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2013-058 - MRBS - Abandoned - Mutliple vulnerabilities

By Drupal Security Team on 17 Jul 2013 at 15:57 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-058
Project: MRBS (third-party module)
Version: 6.x, 7.x
Date: 2013-July-17
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Cross Site Request Forgery, SQL Injection

SA-CONTRIB-2013-057 - TinyBox - Cross Site Scripting (XSS)

By Drupal Security Team on 10 Jul 2013 at 14:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-057
Project: TinyBox (Simple Splash) (third-party module)
Version: 7.x
Date: 2013-July-10
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2013-056 - Stage File Proxy - Denial of Service

By Drupal Security Team on 10 Jul 2013 at 14:16 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-056
Project: Stage File Proxy (third-party module)
Version: 7.x
Date: 2013-July-10th
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

SA-CONTRIB-2013-055 - Hatch - Cross Site Scripting

By Drupal Security Team on 9 Jul 2013 at 21:21 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2013-055
Project: Hatch (third-party theme)
Version: 7.x
Date: 2013-July-10
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

Pages

Subscribe with RSS