Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2009-033 - Quiz - Cross site scripting

By Drupal Security Team on 3 Jun 2009 at 20:34 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-033
Project: Quiz (third-party module)
Version: 5.x, 6.x
Date: 2009-June-03
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2009-032 - Webform - Cross-site scripting

By Drupal Security Team on 3 Jun 2009 at 20:03 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-032
Project: Webform (third-party module)
Versions: 5.x, 6.x
Date: 2009-June-03
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross-site scripting

SA-CONTRIB-2009-031 - Ajax Session - Multiple vulnerabilities

By Drupal Security Team on 27 May 2009 at 17:20 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-031
Project: Ajax Session (third-party module)
Version: 5.x
Date: 2009 May 27
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

SA-CONTRIB-2009-030 - Email Verification - Information disclosure / Cross Site Scripting

By Drupal Security Team on 20 May 2009 at 20:09 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-030
Project: Email Verification (third-party module)
Version: 5.x, 6.x
Date: 2009-May-20
Security risk: High
Exploitable from: Remote
Vulnerability: Information disclosure, Cross Site Scripting

SA-CONTRIB-2009-029 - Views Bulk Operations - Access Bypass

By Drupal Security Team on 20 May 2009 at 20:07 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-029
Project: Views Bulk Operations (third-party module)
Version: 5.x, 6.x
Date: 2009-May-20
Security risk: Medium
Exploitable from: Remote
Vulnerability: Access bypass

SA-CORE-2009-006 - Drupal core - Cross site scripting

By Drupal Security Team on 13 May 2009 at 19:47 UTC

Advisory ID: DRUPAL-SA-CORE-2009-006
Project: Drupal core
Version: 5.x, 6.x
Date: 2009-May-13
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-CONTRIB-2009-028 - Feed Block - Cross Site Scripting

By Drupal Security Team on 13 May 2009 at 16:56 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-028
Project: Feed Block (third-party module)
Version: 6.x
Date: 2009-May-13
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2009-027 - Printer, e-mail and PDF versions - Cross-site scripting

By Drupal Security Team on 13 May 2009 at 16:40 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-027
Project: Printer, e-mail and PDF versions (third-party module)
Versions: 5.x, 6.x
Date: 2009-May-13
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

SA-CONTRIB-2009-026 - LoginToboggan - Access bypass

By Drupal Security Team on 13 May 2009 at 16:34 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2009-026
Project: LoginToboggan (third-party module)
Version: 6.x
Date: 2009-May-13
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CORE-2009-005 - Drupal core - Cross site scripting

By Drupal Security Team on 30 Apr 2009 at 01:48 UTC

Advisory ID: DRUPAL-SA-CORE-2009-005
Project: Drupal core
Version: 5.x, 6.x
Date: 2009-April-29
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Pages

Subscribe with RSS