Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

XML Sitemap - Moderately Critical - XSS - SA-CONTRIB-2016-030

By Drupal Security Team on 25 May 2016 at 15:50 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-030
Project: XML Sitemap (third-party module)
Version: 7.x
Date: 2016-May-25
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

Views Megarow - Critical - Access Bypass - SA-CONTRIB-2016-029

By Drupal Security Team on 18 May 2016 at 17:54 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-027
Project: Views Megarow (third-party module)
Version: 7.x
Date: 2016-May-18
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Access bypass, Information Disclosure

Registration Codes - Less Critical - Input Validation Vulnerability - SA-CONTRIB-028

By Drupal Security Team on 18 May 2016 at 17:54 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-028
Project: Registration codes (third-party module)
Version: 6.x, 7.x
Date: 2016-May-18
Security risk: 9/25 ( Less Critical) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass

Dropbox client - Multiple Vulnerabilities - SA-CONTRIB-2016-027

By Drupal Security Team on 18 May 2016 at 17:29 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-027
Project: Dropbox Client (third-party module)
Version: 7.x
Date: 2016-May-18
Security risk: 15/25 ( Critical) AC:Complex/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Access bypass, Cross Site Request Forgery, Information Disclosure, Multiple vulnerabilities

Open Atrium Notifications - Less Critical - Information Disclosure - SA-CONTRIB-2016-026

By Drupal Security Team on 4 May 2016 at 16:43 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-026
Project: Open Atrium Notifications (third-party module)
Version: 7.x
Date: 2016-May-04
Security risk: 9/25 ( Less Critical) AC:Complex/A:User/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Information Disclosure

Fieldable Panels Panes - Moderately Critical - XSS - SA-CONTRIB-2016-025

By Drupal Security Team on 4 May 2016 at 16:06 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-025
Project: Fieldable Panels Panes (FPP) (third-party module)
Version: 7.x
Date: 2016-May-04
Security risk: 10/25 ( Moderately Critical) AC:Complex/A:User/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

EPSA Crop - Image Cropping - Critical -XSS - SA-CONTRIB-2016-024 - Unsupported

By Drupal Security Team on 20 Apr 2016 at 16:51 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-024
Project: EPSA Crop - Image Cropping (third-party module)
Version: 7.x
Date: 2016-April-20
Security risk: 18/25 ( Critical) AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery

Organic groups - Moderately Critical - Access bypass - DRUPAL-SA-CONTRIB-2016-023

By Drupal Security Team on 20 Apr 2016 at 14:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-023
Project: Organic groups (third-party module)
Version: 7.x
Date: 2016-April-20
Security risk: 12/25 ( Moderately Critical) AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass

Search API - Moderately Critical - Multiple Vulnerabilities - SA-CONTRIB-2016-022

By Drupal Security Team on 20 Apr 2016 at 13:31 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-022
Project: Search API (third-party module)
Version: 7.x
Date: 2016-April-20
Security risk: 11/25 ( Moderately Critical) AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Information Disclosure, Cross Site Scripting, Access bypass

Boost - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-021

By Drupal Security Team on 13 Apr 2016 at 18:30 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2016-021
Project: Boost (third-party module)
Version: 7.x
Date: 2016-April-13
Security risk: 11/25 ( Moderately Critical) AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Information Disclosure

Pages

Subscribe with RSS

XML Sitemap - Moderately Critical - XSS - SA-CONTRIB-2016-030

Views Megarow - Critical - Access Bypass - SA-CONTRIB-2016-029

Registration Codes - Less Critical - Input Validation Vulnerability - SA-CONTRIB-028

Dropbox client - Multiple Vulnerabilities - SA-CONTRIB-2016-027

Open Atrium Notifications - Less Critical - Information Disclosure - SA-CONTRIB-2016-026

Fieldable Panels Panes - Moderately Critical - XSS - SA-CONTRIB-2016-025

EPSA Crop - Image Cropping - Critical -XSS - SA-CONTRIB-2016-024 - Unsupported

Organic groups - Moderately Critical - Access bypass - DRUPAL-SA-CONTRIB-2016-023

Search API - Moderately Critical - Multiple Vulnerabilities - SA-CONTRIB-2016-022

Boost - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-021

Pages

News items

Our community

Documentation

Drupal code base

Governance of community