Deprecated - Security advisories for Drupal core | Drupal.org

This forum is deprecated — view current Drupal core security advisories

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2015-003

By Drupal Security Team on 19 Aug 2015 at 19:27 UTC

Advisory ID: DRUPAL-SA-CORE-2015-003
Project: Drupal core
Version: 6.x, 7.x
Date: 2015-August-19
Security risk: 18/25 ( Critical) AC:Complex/A:User/CI:All/II:All/E:Proof/TD:All
Vulnerability: Cross Site Scripting, Access bypass, SQL Injection, Open Redirect, Multiple vulnerabilities

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2015-002

By Drupal Security Team on 17 Jun 2015 at 16:12 UTC

Advisory ID: DRUPAL-SA-CORE-2015-002
Project: Drupal core
Version: 6.x, 7.x
Date: 2015-June-17
Security risk: 15/25 ( Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass, Information Disclosure, Open Redirect, Multiple vulnerabilities

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001

By Drupal Security Team on 18 Mar 2015 at 18:04 UTC

Advisory ID: DRUPAL-SA-CORE-2015-001
Project: Drupal core
Version: 6.x, 7.x
Date: 2015-March-18
Security risk: 14/25 ( Moderately Critical) AC:Complex/A:None/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: Access bypass, Open Redirect, Multiple vulnerabilities

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2014-006

By Drupal Security Team on 19 Nov 2014 at 18:21 UTC

Advisory ID: DRUPAL-SA-CORE-2014-006
Project: Drupal core
Version: 6.x, 7.x
Date: 2014-November-19
Security risk: 14/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Uncommon
Vulnerability: Multiple vulnerabilities

SA-CORE-2014-005 - Drupal core - SQL injection

By Drupal Security Team on 15 Oct 2014 at 16:02 UTC

Advisory ID: DRUPAL-SA-CORE-2014-005
Project: Drupal core
Version: 7.x
Date: 2014-Oct-15
Security risk: 25/25 ( Highly Critical) AC:None/A:None/CI:All/II:All/E:Exploit/TD:All
Vulnerability: SQL Injection

SA-CORE-2014-004 - Drupal core - Denial of service

By Drupal Security Team on 6 Aug 2014 at 17:41 UTC

Advisory ID: DRUPAL-SA-CORE-2014-004
Project: Drupal core
Version: 6.x, 7.x
Date: 2014-August-06
Security risk: 13/25 (

Moderately Critical

) AC:None/A:None/CI:None/II:None/E:Proof/TD:100
Exploitable from: Remote
Vulnerability: Denial of service

Pages

Subscribe with RSS