Skip to main content
Skip to search
Can we use first and third party cookies and web beacons to
understand our audience, and to tailor promotions you see
?
Yes, please
No, do not track me
Drupal.org home
Discover Drupal
Drupal Core
Drupal CMS
Drupal AI
Case Studies
Drupal for Government
Drupal for Higher Education
Drupal for Nonprofit
Drupal for eCommerce
Drupal for FinTech
Drupal for Healthcare
Drupal for Enterprise
Drupal for Retail
Drupal for Travel & Tourism
Build with Drupal
Download Drupal
Documentation
Getting started
Local Development Guide
Developer Resources
Drupal CMS User Guide
Drupal User Guide
API
Modules
Themes
Recipes
Site Templates
Issue queues
Security Advisories
Partners & Services
Find a Drupal Certified Partner
Become a Drupal Certified Partner
Find a Hosting Provider
Find a Migration Partner
Find Training
Drupal Steward
Community
About the Community
How to Contribute
DrupalCon
Events
News & Blogs
Forum
Slack
Newsletters
Drupal Swag Shop
Drupal Advocacy Program
Support Drupal
The Drupal Association
Donate
Become a Partner
Become a Ripple Maker
Become a Drupal Sustaining Member
Drupal Swag Shop
Get Started
Try Drupal CMS
Try Hosting
Return to content
Search form
Search
Log in
Create account
Security advisories
Show advisories for
only Drupal Core
,
only contributed projects
, or
only
PSAs
SA-CONTRIB-2015-029 - Corner - Cross Site Request Forgery (CSRF) - Unsupported
By
Drupal Security Team
on
21 Jan 2015 at 20:01 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-029
Project:
Corner
(third-party module)
Version: 6.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
21 Jan 2015 at 19:49 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-028
Project:
Shibboleth authentication
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-027 - Quizzler - Cross Site Scripting (XSS)
By
Drupal Security Team
on
21 Jan 2015 at 16:20 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-027
Project:
Quizzler
(third-party module)
Version: 7.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-026 - Taxonews - Cross Site Scripting (XSS)
By
Drupal Security Team
on
21 Jan 2015 at 16:07 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-026
Project:
Taxonews
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-025 - Patterns - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
21 Jan 2015 at 15:39 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-025
Project:
Patterns
(third-party module)
Version: 7.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-023 - Classified Ads - Cross Site Scripting (XSS)
By
Drupal Security Team
on
21 Jan 2015 at 15:30 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-023
Project:
Classified Ads
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-024 - Alfresco - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
21 Jan 2015 at 15:28 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-024
Project:
Alfresco
(third-party module)
Version: 6.x
Date: 2015-January-21
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-022 - nodeauthor - Cross Site Scripting (XSS) - Unsupported
By
Drupal Security Team
on
14 Jan 2015 at 19:12 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-022
Project:
nodeauthor
(third-party module)
Version: 7.x
Date: 2015-January-14
Security risk:
12/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-021 - Content Analysis - Cross Site Scripting (XSS)
By
Drupal Security Team
on
14 Jan 2015 at 19:01 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-021
Project:
Content Analysis
(third-party module)
Version: 6.x
Date: 2015-January-14
Security risk:
16/25 (
Critical
) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-020 - Contact Form Fields - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
14 Jan 2015 at 18:09 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-020
Project:
Contact form fields
(third-party module)
Version: 6.x
Date: 2015-January-14
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-019 - Ubercart Currency Conversion - Open Redirect
By
Drupal Security Team
on
14 Jan 2015 at 18:05 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-019
Project:
Ubercart Currency Conversion
(third-party module)
Version: 6.x
Date: 2015-January-14
Security risk:
10/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Open Redirect
SA-CONTRIB-2015-018 - Video - Cross Site Scripting (XSS)
By
Drupal Security Team
on
14 Jan 2015 at 17:59 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-018
Project:
Video
(third-party module)
Version: 7.x
Date: 2015-January-14
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-017 - Room Reservations - Cross Site Scripting (XSS)
By
Drupal Security Team
on
14 Jan 2015 at 17:52 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-017
Project:
Room Reservations
(third-party module)
Version: 7.x
Date: 2015-January-14
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-016 - Tadaa! - Multiple vulnerabilities
By
Drupal Security Team
on
14 Jan 2015 at 17:46 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-016
Project:
Tadaa!
(third-party module)
Version: 7.x
Date: 2015-January-14
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery, Open Redirect
SA-CONTRIB-2015-015 - Term Merge - Cross Site Scripting (XSS)
By
Drupal Security Team
on
14 Jan 2015 at 17:39 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-015
Project:
Term merge
(third-party module)
Version: 7.x
Date: 2015-January-14
Security risk:
12/25 (
Moderately Critical
) AC:Complex/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-014 - Wishlist - Multiple vulnerabilities
By
Drupal Security Team
on
14 Jan 2015 at 17:31 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-014
Project:
Wishlist Module
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-14
Security risk:
16/25 (
Critical
) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery
SA-CONTRIB-2015-010 - Log Watcher - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
7 Jan 2015 at 19:33 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-010
Project:
Log Watcher
(third-party module)
Version: 6.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-013 - Field Display Label - Cross Site Scripting (XSS)
By
Drupal Security Team
on
7 Jan 2015 at 18:57 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-013
Project:
Field Display Label
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-012 - Jammer - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
7 Jan 2015 at 18:54 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-012
Project:
Jammer
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-011 - Todo Filter - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
7 Jan 2015 at 18:34 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-011
Project:
Todo Filter
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-009 - Linkit - Cross Site Scripting (XSS)
By
Drupal Security Team
on
7 Jan 2015 at 18:25 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-009
Project:
Linkit
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-008 - Batch Jobs - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
7 Jan 2015 at 18:20 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-008
Project:
Batch Jobs
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
15/25 (
Critical
) AC:None/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-006 - Cloudwords for Multilingual Drupal - Multiple vulnerabilities
By
Drupal Security Team
on
7 Jan 2015 at 18:15 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-006
Project:
Cloudwords for Multilingual Drupal
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
16/25 (
Critical
) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting, Cross Site Request Forgery
SA-CONTRIB-2015-007 - Htaccess - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
7 Jan 2015 at 18:14 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-007
Project:
htaccess
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
16/25 (
Critical
) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2015-005 - WikiWiki - SQL injection
By
Drupal Security Team
on
7 Jan 2015 at 17:02 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-005
Project:
WikiWiki
(third-party module)
Version: 6.x
Date: 2015-January-07
Security risk:
22/25 (
Highly Critical
) AC:None/A:None/CI:All/II:All/E:Theoretical/TD:All
Vulnerability: SQL Injection
SA-CONTRIB-2015-004 - Context - Open Redirect
By
Drupal Security Team
on
7 Jan 2015 at 16:30 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-004
Project:
Context
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
9/25 (
Less Critical
) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:Default
Vulnerability: Open Redirect
SA-CONTRIB-2015-003 - PHPlist Integration Module - SQL Injection
By
Drupal Security Team
on
7 Jan 2015 at 16:10 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-003
Project:
PHPlist Integration Module
(third-party module)
Version: 6.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: SQL Injection
SA-CONTRIB-2015-002 - Course - Cross Site Scripting (XSS)
By
Drupal Security Team
on
7 Jan 2015 at 15:59 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-002
Project:
Course
(third-party module)
Version: 6.x, 7.x
Date: 2015-January-07
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2015-001 - OPAC - Cross Site Request Forgery (CSRF)
By
Drupal Security Team
on
7 Jan 2015 at 15:39 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2015-001
Project:
OPAC
(third-party module)
Version: 7.x
Date: 2015-January-07
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Request Forgery
SA-CONTRIB-2014-128 - Organic Groups Menu - Access bypass
By
Drupal Security Team
on
17 Dec 2014 at 19:57 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-128
Project:
OG Menu
(third-party module)
Version: 6.x, 7.x
Date: 2014-December-17
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Access bypass, Information Disclosure
SA-CONTRIB-2014-127 - School Administration - Cross Site Scripting (XSS)
By
Drupal Security Team
on
17 Dec 2014 at 18:57 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-127
Project:
School Administration
(third-party module)
Version: 7.x
Date: 2014-December-17
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-126 - Open Atrium - Multiple vulnerabilities
By
Drupal Security Team
on
17 Dec 2014 at 18:09 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-126
Project:
Open Atrium
(third-party module)
Version: 7.x
Date: 2014-December-17
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass, Cross Site Request Forgery, Multiple vulnerabilities
SA-CONTRIB-2014-125 - Organic Groups Menu - Access bypass
By
Drupal Security Team
on
10 Dec 2014 at 20:08 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-125
Project:
OG Menu
(third-party module)
Version: 6.x, 7.x
Date: 2014-December-10
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Access bypass, Information Disclosure
SA-CONTRIB-2014-124 - Poll Chart - Cross Site Scripting (XSS)
By
Drupal Security Team
on
10 Dec 2014 at 20:05 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-124
Project:
Poll Chart Block
(third-party module)
Version: 7.x
Date: 2014-December-10
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-123 - Postal Code - Cross Site Scripting (XSS)
By
Drupal Security Team
on
10 Dec 2014 at 18:38 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-123
Project:
Postal Code
(third-party module)
Version: 7.x
Date: 2014-December-10
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-122 - MoIP - Cross Site Scripting (XSS)
By
Drupal Security Team
on
10 Dec 2014 at 18:28 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-122
Project:
MoIP
(third-party module)
Version: 7.x
Date: 2014-December-10
Security risk:
16/25 (
Critical
) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-121 - Godwin's Law - Cross Site Scripting (XSS)
By
Drupal Security Team
on
10 Dec 2014 at 18:20 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-121
Project:
Godwin's Law
(third-party module)
Version: 7.x
Date: 2014-December-10
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-120 - Piwik Web Analytics - Information disclosure
By
Drupal Security Team
on
10 Dec 2014 at 15:21 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-120
Project:
Piwik Web Analytics
(third-party module)
Version: 7.x
Date: 2014-December-10
Security risk:
11/25 ( Moderately Critical) AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Information Disclosure
SA-CONTRIB-2014-119 - Google Analytics - Information disclosure
By
Drupal Security Team
on
10 Dec 2014 at 15:09 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-119
Project:
Google Analytics
(third-party module)
Version: 7.x
Date: 2014-December-10
Security risk:
11/25 ( Moderately Critical) AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Information Disclosure
SA-CONTRIB-2014-118 - Administer Users by Role - Access Bypass - Unsupported
By
Drupal Security Team
on
10 Dec 2014 at 15:03 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-118
Project:
Administer Users by Role
(third-party module)
Version: 6.x
Date: 2014-December-10
Security risk:
11/25 (
Moderately Critical
) AC:Complex/A:Admin/CI:None/II:All/E:Proof/TD:Default
Vulnerability: Access bypass
SA-CONTRIB-2014-117 - Hierarchical Select - Cross Site Scripting (XSS)
By
Drupal Security Team
on
3 Dec 2014 at 18:30 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-117
Project:
Hierarchical Select
(third-party module)
Version: 6.x
Date: 2014-December-03
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:All/E:Theoretical/TD:Uncommon
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-116 - Webform Invitation - Cross Site Scripting (XSS)
By
Drupal Security Team
on
3 Dec 2014 at 14:18 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-116
Project:
Webform Invitation
(third-party module)
Version: 7.x
Date: 2014-December-03
Security risk:
8/25 (
Less Critical
) AC:Basic/A:User/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-115 - Form Builder - Cross-Site Scripting (XSS)
By
Drupal Security Team
on
19 Nov 2014 at 20:34 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-115
Project:
Form Builder
(third-party module)
Version: 6.x, 7.x
Date: 2014-November-19
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-114 - Tournament - Cross Site Scripting
By
Drupal Security Team
on
19 Nov 2014 at 20:11 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-114
Project:
Tournament
(third-party module)
Version: 7.x
Date: 2014-November-19
Security risk:
8/25 (
Less Critical
) AC:Basic/A:User/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-113 - Secure Password Hashes - Denial of Service
By
Drupal Security Team
on
19 Nov 2014 at 19:54 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-113
Project:
Secure Password Hashes
(third-party module)
Version: 6.x
Date: 2014-11-19
Security risk:
11/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:None/E:Proof/TD:All
Vulnerability: Denial of Service
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2014-006
By
Drupal Security Team
on
19 Nov 2014 at 18:21 UTC
Advisory ID: DRUPAL-SA-CORE-2014-006
Project:
Drupal core
Version: 6.x, 7.x
Date: 2014-November-19
Security risk:
14/25 (
Moderately Critical
) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Uncommon
Vulnerability: Multiple vulnerabilities
SA-CONTRIB-2014-112 - Node Field - Cross Site Scripting (XSS)
By
Drupal Security Team
on
19 Nov 2014 at 18:06 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-112
Project:
Node Field
(third-party module)
Version: 7.x
Date: 2014-November-19
Security risk:
7/25 (
Less Critical
) AC:Basic/A:User/CI:None/II:None/E:Theoretical/TD:Default
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-111 - Protected Pages - Password Protection Bypass
By
Drupal Security Team
on
19 Nov 2014 at 17:56 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-111
Project:
Protected Pages
(third-party module)
Version: 7.x
Date: 2014-November-19
Security risk:
11/25 (
Moderately Critical
) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Access bypass
SA-CONTRIB-2014-109 - Freelinking - Cross Site Scripting (XSS)
By
Drupal Security Team
on
12 Nov 2014 at 15:14 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-109
Project:
Freelinking
(third-party module)
Version: 6.x, 7.x
Date: 2014-November-12
Security risk:
16/25 (
Critical
) AC:Basic/A:User/CI:All/II:All/E:Theoretical/TD:Uncommon
Vulnerability: Cross Site Scripting
SA-CONTRIB-2014-108 - Webform Component Roles - Access Bypass
By
Drupal Security Team
on
12 Nov 2014 at 14:50 UTC
Advisory ID: DRUPAL-SA-CONTRIB-2014-108
Project:
Webform Component Roles
(third-party module)
Version: 6.x, 7.x
Date: 2014-November-12
Security risk:
13/25 (
Moderately Critical
) AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: Access bypass
Pages
« first
‹ previous
…
22
23
24
25
26
27
28
29
30
…
next ›
last »
Subscribe with RSS