Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2015-051 - Term Queue - Cross Site Scripting (XSS)

By Drupal Security Team on 18 Feb 2015 at 16:11 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-051
Project: Term Queue (third-party module)
Version: 6.x
Date: 2015-February-18
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-050 - Services Basic Authentication - Access bypass

By Drupal Security Team on 18 Feb 2015 at 16:05 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-050
Project: Services Basic Authentication (third-party module)
Version: 7.x
Date: 2015-February-18
Security risk: 15/25 ( Critical) AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: Access bypass

SA-CONTRIB-2015-049 - Navigate - Cross Site Scripting (XSS)

By Drupal Security Team on 18 Feb 2015 at 15:24 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-049
Project: Navigate (third-party module)
Version: 6.x, 7.x
Date: 2015-February-18
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-048 - Avatar Uploader - Arbitrary PHP code execution

By Drupal Security Team on 18 Feb 2015 at 15:09 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-048
Project: Avatar Uploader (third-party module)
Version: 6.x, 7.x
Date: 2015-February-18
Security risk: 16/25 ( Critical) AC:None/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Arbitrary PHP code execution

SA-CONTRIB-2015-047 - Panopoly Magic - Cross Site Scripting (XSS)

By Drupal Security Team on 18 Feb 2015 at 15:08 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-047
Project: Panopoly Magic (third-party module)
Version: 7.x
Date: 2015-February-18
Security risk: 13/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-046 - Taxonomy Tools - Cross Site Scripting (XSS)

By Drupal Security Team on 11 Feb 2015 at 19:18 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-046
Project: Taxonomy Tools (third-party module)
Version: 7.x
Date: 2015-February-11
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-045 - Node Access Product - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 11 Feb 2015 at 19:18 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-045
Project: Node access product (third-party module)
Version: 6.x, 7.x
Date: 2015-February-11
Security risk: 11/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-044 - Taxonomy Path - Cross Site Scripting (XSS)

By Drupal Security Team on 11 Feb 2015 at 16:21 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-044
Project: Taxonomy Path (third-party module)
Version: 7.x
Date: 2015-February-11
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting

SA-CONTRIB-2015-043 - Commerce Balanced Payments - Multiple vulnerabilities

By Drupal Security Team on 11 Feb 2015 at 16:18 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-043
Project: Commerce Balanced Payments (third-party module)
Version: 7.x
Date: 2015-February-11
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery, Multiple vulnerabilities

SA-CONTRIB-2015-042 - Node basket - Multiple vulnerabilities - Unsupported

By Drupal Security Team on 11 Feb 2015 at 16:09 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2015-042
Project: Node basket (third-party module)
Version: 6.x
Date: 2015-February-11
Security risk: 16/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery, Open Redirect, Multiple vulnerabilities

Pages

Subscribe with RSS

SA-CONTRIB-2015-051 - Term Queue - Cross Site Scripting (XSS)

SA-CONTRIB-2015-050 - Services Basic Authentication - Access bypass

SA-CONTRIB-2015-049 - Navigate - Cross Site Scripting (XSS)

SA-CONTRIB-2015-048 - Avatar Uploader - Arbitrary PHP code execution

SA-CONTRIB-2015-047 - Panopoly Magic - Cross Site Scripting (XSS)

SA-CONTRIB-2015-046 - Taxonomy Tools - Cross Site Scripting (XSS)

SA-CONTRIB-2015-045 - Node Access Product - Cross Site Scripting (XSS) - Unsupported

SA-CONTRIB-2015-044 - Taxonomy Path - Cross Site Scripting (XSS)

SA-CONTRIB-2015-043 - Commerce Balanced Payments - Multiple vulnerabilities

SA-CONTRIB-2015-042 - Node basket - Multiple vulnerabilities - Unsupported

Pages

News items

Our community

Documentation

Drupal code base

Governance of community