Security advisories | Drupal.org

Show advisories for only Drupal Core, only contributed projects, or only PSAs

SA-2008-009 - Workflow - Cross site scripting

By Heine on 23 Jan 2008 at 21:26 UTC

Advisory ID: DRUPAL-SA-2008-009
Project: Workflow (third-party module)
Version: 4.7.x, 5.x
Date: 2008-January-23
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-008 - Meta tags - Arbitrary code execution

By Heine on 14 Jan 2008 at 08:48 UTC

Advisory ID: DRUPAL-SA-2008-008
Project: Meta tags / Nodewords (third-party module)
Version: 5.x-1.6
Date: 2008-January-14
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

SA-2008-007 - Drupal core - Cross site scripting (register_globals)

By Heine on 10 Jan 2008 at 21:03 UTC

Advisory ID: DRUPAL-SA-2008-007
Project: Drupal core
Version: 4.7.x, 5.x
Date: 2008-January-10
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting when register_globals is enabled.

SA-2008-006 - Drupal core - Cross site scripting (UTF8)

By Heine on 10 Jan 2008 at 21:02 UTC

Advisory ID: DRUPAL-SA-2008-006
Project: Drupal core
Version: 4.7.x, 5.x
Date: 2008-January-10
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2008-005 - Drupal core - Cross site request forgery

By Heine on 10 Jan 2008 at 21:00 UTC

Advisory ID: DRUPAL-SA-2008-005
Project: Drupal core
Version: 4.7.x, 5.x
Date: 2008-January-10
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

SA-2008-004 - Fileshare - Arbitrary code execution

By Heine on 10 Jan 2008 at 19:42 UTC

Advisory ID: DRUPAL-SA-2008-004
Project: Fileshare (third-party module)
Version: 4.7.x, 5.x
Date: 2008-January-10
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

SA-2008-003 - BUEditor - CSRF

By Heine on 10 Jan 2008 at 19:42 UTC

Advisory ID: DRUPAL-SA-2008-003
Project: BUEditor (third-party module)
Version: 4.7.x, 5.x
Date: 2008-January-10
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

SA-2008-002 - Atom - Access bypass

By Heine on 10 Jan 2008 at 19:36 UTC

Advisory ID: DRUPAL-SA-2008-002
Project: Atom (third-party module)
Version: 4.7.x, 5.x
Date: 2008-January-10
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

SA-2008-001 - Devel - Cross site scripting

By Heine on 10 Jan 2008 at 19:32 UTC

Advisory ID: DRUPAL-SA-2008-001
Project: Devel (third-party module)
Version: 5.x
Date: 2008-January-10
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

SA-2007-033 - Feature - CSRF

By Heine on 5 Dec 2007 at 20:39 UTC

Advisory ID: DRUPAL-SA-2007-033
Project: Feature module (third-party module)
Version: 4.7.x, 5.x
Date: 2007-December-05
Security risk: Not critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

Pages

Subscribe with RSS