Skip to main content
Skip to search
Can we use first and third party cookies and web beacons to
understand our audience, and to tailor promotions you see
?
Yes, please
No, do not track me
Drupal.org home
Discover Drupal
Drupal Core
Drupal CMS
Drupal AI
Case Studies
Drupal for Government
Drupal for Higher Education
Drupal for Nonprofit
Drupal for eCommerce
Drupal for FinTech
Drupal for Healthcare
Drupal for Enterprise
Drupal for Retail
Drupal for Travel & Tourism
Build with Drupal
Download Drupal
Documentation
Getting started
Local Development Guide
Developer Resources
Drupal CMS User Guide
Drupal User Guide
API
Modules
Themes
Recipes
Site Templates
Issue queues
Security Advisories
Partners & Services
Find a Drupal Certified Partner
Become a Drupal Certified Partner
Find a Hosting Provider
Find a Migration Partner
Find Training
Drupal Steward
Community
About the Community
How to Contribute
DrupalCon
Events
Jobs / Careers
News & Blogs
Forum
Slack
Newsletters
Drupal Swag Shop
Support Drupal
The Drupal Association
Donate
Become a Partner
Become a Ripple Maker
Become an Organization Member
Drupal Swag Shop
Get Started
Try Drupal CMS
Try Hosting
Return to content
Search form
Search
Log in
Create account
Security advisories
Show advisories for
only Drupal Core
,
only contributed projects
, or
only
PSAs
SA-CONTRIB-2015-037 - Path Breadcrumbs - Access Bypass
By
Drupal Security Team
on
4 Feb 2015 at 18:02 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-037
Project:
Path Breadcrumbs
(third-party module)
Version: 7.x
Date: 2015-February-04
Security risk:
12/25 (
Moderately Critical
) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: Access bypass
SA-CONTRIB-2015-036 - Public Download Count - Cross Site Scripting (XSS) - Unsupported
By
Drupal Security Team
on
4 Feb 2015 at 17:39 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-036
Project:
Public Download Count
(third-party module)
Version: 7.x
Date: 2015-February-04
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS)
By
Drupal Security Team
on
4 Feb 2015 at 17:22 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-035
Project:
Ajax Timeline
(third-party module)
Version: 7.x
Date: 2015-February-04
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-034 - Commerce WeDeal - Open Redirect
By
Drupal Security Team
on
4 Feb 2015 at 17:13 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-034
Project:
Commerce WeDeal
(third-party module)
Version: 7.x
Date: 2015-February-04
Security risk:
10/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Open Redirect
SA-CONTRIB-2015-033 - Certify - Access bypass and information disclosure
By
Drupal Security Team
on
28 Jan 2015 at 18:14 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-033
Project:
Certify
(third-party module)
Version: 6.x
Date: 2015-January-28
Security risk:
11/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: Access bypass, Information Disclosure, Multiple vulnerabilities
SA-CONTRIB-2015-032 - Node Invite - Multiple vulnerabilities
By
Drupal Security Team
on
28 Jan 2015 at 16:57 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-032
Project:
Node Invite
(third-party module)
Version: 6.x
Date: 2015-January-28
Security risk:
15/25 (
Critical
) AC:None/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting, Cross Site Request Forgery, Open Redirect
SA-CONTRIB-2015-031 - GD Infinite Scroll - Multiple vulnerabilites
By
Drupal Security Team
on
28 Jan 2015 at 16:37 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-031
Project:
GD Infinite Scroll
(third-party module)
Version: 7.x
Date: 2015-January-28
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery
SA-CONTRIB-2015-030 - Amazon AWS - Access bypass
By
Drupal Security Team
on
28 Jan 2015 at 16:27 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-030
Project:
Amazon AWS
(third-party module)
Version: 7.x
Date: 2015-January-28
Security risk:
14/25 (
Moderately Critical
) AC:None/A:None/CI:None/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass
SA-CONTRIB-2015-029 - Corner - Cross Site Request Forgery (CSRF) - Unsupported
By
Drupal Security Team
on
21 Jan 2015 at 20:01 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-029
Project:
Corner
(third-party module)
Version: 6.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
21 Jan 2015 at 19:49 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-028
Project:
Shibboleth authentication
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
Pages
« first
‹ previous
…
101
102
103
104
105
106
107
108
109
…
next ›
last »
Subscribe with RSS
