Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2010-046: Award - Cross Site Scripting

By Drupal Security Team on 12 May 2010 at 18:57 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-046
Project: Award (third-party module)
Version: 5.x, 6.x
Date: 2010-May-12
Security risk: Critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2010-045 - Auto Assign Role - Access bypass

By Drupal Security Team on 12 May 2010 at 18:45 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-045
Project: Auto Assign Role (third-party module)
Version: 6.x
Date: 2010-May-12
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Access Bypass

SA-CONTRIB-2010-044: Bibliography - Cross Site Scripting

By Drupal Security Team on 12 May 2010 at 18:38 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-044
Project: Bibliography (third-party module)
Version: 5.x, 6.x
Date: 2010-May-12
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2010-043: Wordfilter - Cross Site Scripting

By Drupal Security Team on 12 May 2010 at 18:35 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-043
Project: Wordfilter (third-party module)
Version: 5.x, 6.x
Date: 2010-May-12
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2010-042: LoginToboggan - Session fixation

By Drupal Security Team on 12 May 2010 at 17:27 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-042
Project: LoginToboggan (third-party module)
Version: 5.x, 6.x
Date: 2010-05-12
Security risk: Critical
Exploitable from: Remote
Vulnerability: Session fixation

SA-CONTRIB-2010-041: ImageField - Access Bypass

By Drupal Security Team on 6 May 2010 at 00:42 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-041
Project: ImageField (third-party module)
Version: 6.x
Date: 2010-May-5
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Access Bypass

SA-CONTRIB-2010-040: FileField - Access Bypass

By Drupal Security Team on 6 May 2010 at 00:42 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-040
Project: FileField (third-party module)
Version: 6.x
Date: 2010-May-5
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Access Bypass

SA-CONTRIB-2010-039: CCK TableField - Cross Site Scripting

By Drupal Security Team on 5 May 2010 at 22:35 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-039
Project: CCK TableField (third-party module)
Version: 6.x
Date: 2010-May-05
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2010-038 - Privatemsg - Access bypass

By Drupal Security Team on 28 Apr 2010 at 20:26 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-038
Project: Privatemsg (third-party module)
Version: 6.x
Date: 2010-April-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Access Bypass

SA-CONTRIB-2010-037 - Decisions - Access bypass

By Drupal Security Team on 28 Apr 2010 at 18:32 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2010-037
Project: Decisions (third-party module)
Version: 5.x, 6.x
Date: 2010-April-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Access Bypass

Pages

Subscribe with RSS