Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fedoraFedoraFEDORA:438D16045644
HistoryJan 04, 2020 - 10:16 p.m.

[SECURITY] Fedora 30 Update: drupal7-7.69-1.fc30

2020-01-0422:16:18
lists.fedoraproject.org
32

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure.

OSVersionArchitecturePackageVersionFilename
Fedora30anydrupal7< 7.69UNKNOWN

Related

openvas 31
fedora 15
nessus 48
debian 6
osv 10
prion 2
github 2
drupal 2
redhatcve 2
threatpost 1
debiancve 2
cve 3
ibm 30
ubuntucve 2
typo3 2
freebsd 2
alpinelinux 2
atlassian 9
githubexploit 5
checkpoint_advisories 1
redhat 8
amazon 1
f5 1
symantec 1
veracode 1
joomla 1
hackerone 1
cnvd 1
archlinux 1
oraclelinux 1
attackerkb 1
rocky 1
altlinux 1
suse 2
openvas
openvas
Debian LTS: Security Advisory for drupal7 (DLA-1797-1)
2019-05-21 00:00:00
Fedora Update for drupal7 FEDORA-2019-5f1a2cc839
2020-01-08 00:00:00
Fedora Update for drupal7 FEDORA-2019-84a50e34a9
2019-05-26 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: drupal7-7.67-1.fc30
2019-05-25 01:06:23
[SECURITY] Fedora 29 Update: drupal7-7.67-1.fc29
2019-05-25 03:36:33
[SECURITY] Fedora 28 Update: drupal7-7.67-1.fc28
2019-05-25 01:11:40
nessus
nessus
Debian DLA-1797-1 : drupal7 security update
2019-05-21 00:00:00
FreeBSD : drupal -- Drupal core - Moderately critical (9b8a52fc-89c1-11e9-9ba0-4c72b94353b5)
2019-06-10 00:00:00
Debian DSA-4445-1 : drupal7 - security update
2019-05-15 00:00:00
debian
debian
[SECURITY] [DLA 1797-1] drupal7 security update
2019-05-20 14:21:50
[SECURITY] [DSA 4445-1] drupal7 security update
2019-05-14 21:15:13
[SECURITY] [DSA 4434-1] drupal7 security update
2019-04-20 12:03:09
osv
osv
drupal7 - security update
2019-05-20 00:00:00
drupal7 - security update
2019-05-14 00:00:00
CVE-2019-11831
2019-05-09 04:29:01
prion
prion
Deserialization of untrusted data
2019-05-09 04:29:00
Design/Logic Flaw
2019-04-20 00:29:00
github
github
Directory Traversal in typo3/phar-stream-wrapper
2021-09-30 17:10:14
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
2019-04-26 16:29:11
drupal
drupal
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2019-007
2019-05-08 00:00:00
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-006
2019-04-17 00:00:00
redhatcve
redhatcve
CVE-2019-11831
2022-05-20 23:21:40
CVE-2019-11358
2021-07-18 00:15:31
threatpost
threatpost
Serious Phar Flaw Allows Arbitrary Code Execution on Drupal
2019-05-09 16:00:22
debiancve
debiancve
CVE-2019-11831
2019-05-09 04:29:00
CVE-2019-11358
2019-04-20 00:29:00
cve
cve
CVE-2019-11831
2019-05-09 04:29:00
CVE-2019-11358
2019-04-20 00:29:00
CVE-2019-5428
2019-04-22 21:29:00
ibm
ibm
Security Bulletin: IBM API Connect Developer Portal is impacted by a vulnerability in Drupal core (CVE-2019-11831)
2019-06-14 18:10:01
Security Bulletin: A security vulnerability has been idenfied in jQuery which affects DataQuant for z/OS (CVE-2019-11358)
2021-02-12 21:24:38
Security Bulletin: The IBM® Engineering Lifecycle Engineering product using jQuery 3.2.1 is vulnerable to Cross Site Scripting - CVE-2019-11358
2023-10-04 10:40:15
ubuntucve
ubuntucve
CVE-2019-11831
2019-05-09 00:00:00
CVE-2019-11358
2019-04-20 00:00:00
typo3
typo3
By-passing protection of Phar Stream Wrapper Interceptor
2019-05-08 00:00:00
Cross-Site Scripting in jQuery before 3.4.0
2019-05-07 00:00:00
freebsd
freebsd
drupal -- Drupal core - Moderately critical
2019-05-08 00:00:00
Django -- AdminURLFieldWidget XSS
2019-06-03 00:00:00
alpinelinux
alpinelinux
CVE-2019-11831
2019-05-09 04:29:00
CVE-2019-11358
2019-04-20 00:29:00
atlassian
atlassian
Address CVE-2019-11358 in the bundled version of jQuery
2019-07-08 22:50:18
Address CVE-2019-11358 in the bundled version of jQuery
2019-07-08 22:57:45
Address CVE-2019-11358 in the bundled version of jQuery
2019-07-08 22:50:18
githubexploit
githubexploit
Exploit for Prototype Pollution in Jquery
2019-07-18 19:15:33
Exploit for Prototype Pollution in Jquery
2021-03-08 11:34:11
Exploit for Prototype Pollution in Jquery
2020-12-01 09:18:58
checkpoint_advisories
checkpoint_advisories
jQuery Prototype Pollution Object Cross-Site Scripting (CVE-2019-11358)
2019-04-29 00:00:00
redhat
redhat
(RHSA-2020:5581) Moderate: python-XStatic-jQuery security update
2020-12-16 12:57:14
(RHSA-2020:1325) Moderate: python-XStatic-jQuery security update
2020-04-06 08:40:52
(RHSA-2019:2587) Moderate: CloudForms 4.7.9 security, bug fix and enhancement update
2019-09-05 05:18:52
amazon
amazon
Medium: pcs
2023-01-18 00:16:00
f5
f5
K20455158 : jQuery vulnerability CVE-2019-11358
2020-04-14 00:00:00
symantec
symantec
JQuery CVE-2019-11358 Cross Site Scripting Vulnerability
2019-04-17 00:00:00
veracode
veracode
Prototype Pollution
2019-04-22 03:41:01
joomla
joomla
[20190403] - Core - Object.prototype pollution in JQuery $.extend
2019-03-25 00:00:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack through jQuery $.extend
2018-12-03 15:53:20
cnvd
cnvd
Silverstripe framework cross-site scripting vulnerability
2022-11-23 00:00:00
archlinux
archlinux
[ASA-201906-2] python-django: cross-site scripting
2019-06-04 00:00:00
oraclelinux
oraclelinux
pcs security update
2022-11-03 00:00:00
attackerkb
attackerkb
CVE-2019-11358
2019-04-20 00:00:00
rocky
rocky
pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
suse
suse
Security update for python-Django (moderate)
2019-08-08 00:00:00
Security update for python-Django (moderate)
2019-08-14 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for FEDORA:438D16045644
openvas31fedora15nessus48debian6osv10prion2github2drupal2redhatcve2threatpost1debiancve2cve3ibm30ubuntucve2typo32freebsd2alpinelinux2atlassian9githubexploit5checkpoint_advisories1redhat8amazon1f51symantec1veracode1joomla1hackerone1cnvd1archlinux1oraclelinux1attackerkb1rocky1altlinux1suse2