Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

Services - Highly Critical - Arbitrary Code Execution - SA-CONTRIB-2017-029

By Drupal Security Team on 8 Mar 2017 at 15:39 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-029
Project: Services (third-party module)
Version: 7.x
Date: 2017-March-08
Security risk: 21/25 ( Highly Critical) AC:None/A:None/CI:All/II:All/E:Theoretical/TD:Default
Vulnerability: Arbitrary PHP code execution

Breakpoint Panels - Critical - Unsupported - SA-CONTRIB-2017-028

By Drupal Security Team on 1 Mar 2017 at 17:58 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-028
Project: breakpoint panels (third-party module)
Version: 7.x
Date: 2017-March-01

AES - Critical - Unsupported - SA-CONTRIB-2017-027

By Drupal Security Team on 1 Mar 2017 at 15:50 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-027
Project: AES encryption (third-party module)
Version: 7.x, 8.x
Date: 2017-March-01

Location Map - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-026

By Drupal Security Team on 1 Mar 2017 at 15:43 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-026
Project: Location Map (third-party module)
Version: 7.x
Date: 2017-March-01
Security risk: 10/25 ( Moderately Critical) AC:Basic/A:User/CI:None/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting, Access bypass

Remember Me - Critical - Unsupported - SA-CONTRIB-2017-025

By Drupal Security Team on 1 Mar 2017 at 15:34 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-025
Project: Remember Me (third-party module)
Version: 7.x
Date: 2017-March-01

RestWS - Moderately Critical - Information Disclosure - SA-CONTRIB-2017-024

By Drupal Security Team on 1 Mar 2017 at 15:31 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-024
Project: RESTful Web Services (third-party module)
Version: 7.x
Date: 2017-March-01
Security risk: 12/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Information Disclosure

DownloadFile - Critical - Unsupported - SA-CONTRIB-2017-023

By Drupal Security Team on 22 Feb 2017 at 17:22 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-023
Project: DownloadFile (third-party module)
Version: 7.x
Date: 2017-Jan-25
Security risk: 19/25 ( Critical) AC:None/A:None/CI:Some/II:Some/E:Proof/TD:All

Unpublished 404 - Critical - Access bypass - SA-CONTRIB-2017-021

By Drupal Security Team on 22 Feb 2017 at 17:19 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-021
Project: Unpublished 404 (third-party module)
Version: 7.x
Date: 2017-Jan-25
Security risk: 19/25 ( Critical) AC:None/A:None/CI:Some/II:Some/E:Proof/TD:All

Views - Moderately Critical - Access Bypass - SA-CONTRIB-2017-022

By Drupal Security Team on 22 Feb 2017 at 17:18 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-022
Project: Views (third-party module)
Version: 7.x
Date: 2017-February-22
Security risk: 10/25 ( Moderately Critical) AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Access bypass

Timezone Detect - Moderately Critical - Cross Site Request Forgery - SA-CONTRIB-2017-020

By Drupal Security Team on 22 Feb 2017 at 16:45 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2017-020
Project: Timezone Detect (third-party module)
Version: 7.x
Date: 2017-February-22
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery

Pages

Subscribe with RSS