Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-2008-050 - Mailhandler - SQL injection

By heine on 17 Sep 2008 at 16:31 UTC

Advisory ID: DRUPAL-SA-2008-050
Project: Mailhandler (third-party module)
Versions: 5.x and 6.x
Date: 2008-September-17
Security risk: Critical
Exploitable from: Remote
Vulnerability: SQL injection

SA-2008-049 - Talk - Multiple vulnerabilities

By heine on 17 Sep 2008 at 16:11 UTC

Advisory ID: DRUPAL-SA-2008-049
Project: Talk (third-party module)
Version: 5.x, 6.x
Date: 2008-September-17
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting, Node access bypass

SA-2008-048-b - CCK - Cross site scripting

By heine on 4 Sep 2008 at 19:43 UTC

Advisory ID: DRUPAL-SA-2008-048-b
Project: CCK (third-party module)
Version: 5.x
Date: 2008-Sep-04
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-047 - Drupal core - Multiple vulnerabilities

By heine on 13 Aug 2008 at 23:27 UTC

Advisory ID: DRUPAL-SA-2008-047
Project: Drupal core
Version: 5.x, 6.x
Date: 2008-August-13
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

SA-2008-046 - Drupal core - Session fixation

By heine on 23 Jul 2008 at 19:58 UTC

Advisory ID: DRUPAL-SA-2008-046
Project: Drupal core
Version: 5.x
Date: 2008-July-23
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Session fixation

SA-2008-045 - OpenID - Multiple vulnerabilities

By heine on 9 Jul 2008 at 22:08 UTC

Advisory ID: DRUPAL-SA-2008-045
Project: OpenID (third-party module)
Version: 5.x
Date: 2008-July-9
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting, Cross site request forgeries

SA-2008-044 - Drupal core - Multiple vulnerabilities

By heine on 9 Jul 2008 at 21:24 UTC

Advisory ID: DRUPAL-SA-2008-044
Project: Drupal core
Version: 5x, 6.x
Date: 2008-July-9
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

SA-2008-043 - Outline designer - Privilege escalation

By heine on 2 Jul 2008 at 20:56 UTC

Advisory ID: DRUPAL-SA-2008-043
Project: Outline designer (third-party module)
Version: 5.x
Date: 2008-July-2
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Privilege escalation

SA-2008-042 - Tinytax - Cross site scripting

By heine on 2 Jul 2008 at 20:51 UTC

Advisory ID: DRUPAL-SA-2008-042
Project: Tinytax taxonomy block (third-party module)
Version: 5.x
Date: 2008-July-2
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-041 - Taxonomy autotagger - Multiple vulnerabilities

By heine on 2 Jul 2008 at 20:48 UTC

Advisory ID: DRUPAL-SA-2008-041
Project: Taxonomy autotagger (third-party module)
Version: 5.x
Date: 2008-July-2
Security risk: Critical
Exploitable from: Remote
Vulnerability: Cross site scripting and SQL injection

Pages

Subscribe with RSS