Security advisories

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-CONTRIB-2012-072 - cctags - Cross Site Scripting (XSS)

By Drupal Security Team on 2 May 2012 at 19:36 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-072
Project: cctags (third-party module)
Version: 6.x, 7.x
Date: 2012-May-02
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CORE-2012-002 - Drupal core multiple vulnerabilities

By Drupal Security Team on 2 May 2012 at 15:17 UTC

Advisory ID: DRUPAL-SA-CORE-2012-002
Project: Drupal core
Version: 7.x
Date: 2012-May-2
Security risk: Critical
Exploitable from: Remote
Vulnerability: Denial of Service, Access bypass, Unvalidated form redirect

SA-CONTRIB-2012-071 - Glossify - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 2 May 2012 at 14:34 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-071
Project: Glossify Internal Links Auto SEO (third-party module)
Version: 6.x
Date: 2012-May-02
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2012-070 - Taxonomy Grid : Catalog - Cross Site Scripting (XSS) - Unsupported

By Drupal Security Team on 2 May 2012 at 14:33 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-070
Project: Taxonomy Grid : Catalog (third-party module)
Version: 6.x
Date: 2012-May-02
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

SA-CONTRIB-2012-069 - Addressbook - Multiple vulnerabilities - Unsupported

By Drupal Security Team on 2 May 2012 at 14:31 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-069
Project: Addressbook (third-party module)
Version: 6.x
Date: 2012-May-02
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting, Cross Site Request Forgery, SQL Injection

SA-CONTRIB-2012-068 - Node Gallery - Cross Site Request Forgery (CSRF) - Unsupported

By Drupal Security Team on 2 May 2012 at 14:09 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-068
Project: Node Gallery (third-party module)
Version: 6.x
Date: 2012-May-02
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross Site Request Forgery

SA-CONTRIB-2012-067 - Linkit - Access bypass

By Drupal Security Team on 25 Apr 2012 at 19:29 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-067
Project: Linkit (third-party module)
Version: 7.x
Date: 2012-April-25
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass

By Drupal Security Team on 25 Apr 2012 at 19:26 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-066
Project: Spaces (third-party module)
Version: 6.x
Date: 2012-April-25
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-CONTRIB-2012-065 - Sitedoc - Information disclosure

By Drupal Security Team on 25 Apr 2012 at 19:14 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-065
Project: Site Documentation (third-party module)
Version: 6.x
Date: 2012-April-25
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Information Disclosure

SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities

By Drupal Security Team on 25 Apr 2012 at 19:04 UTC

Advisory ID: DRUPAL-SA-CONTRIB-2012-064
Project: Ubercart (third-party module)
Version: 6.x, 7.x
Date: 2012-April-25
Security risk: Moderately critical
Exploitable from: Varies (Local & Remote)
Vulnerability: Cross Site Scripting, Arbitrary PHP code execution, Multiple vulnerabilities

Pages

Subscribe with RSS