CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

CVE-2025-48444 Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

Drupal Commerce Alphabank Redirect 安全漏洞

Drupal Commerce Alphabank Redirect is a redirect banking tool for the Drupal community. A security vulnerability exists in Drupal Commerce Alphabank Redirect versions prior to 1.0.3 that stems from improper authorization and could lead to feature abuse...

Drupal Quick Node Block 安全漏洞

Drupal Quick Node Block is a Drupal plugin for the Drupal community. A security vulnerability exists in Drupal Quick Node Block versions prior to 2.0.0, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-25223 · Drupal · Drupal Admin Audit Trail

Name of the Vulnerable Software and Affected Versions: Drupal Admin Audit Trail versions 0.0.0 through 1.0.4 Description: The issue is related to the allocation of resources without limits or throttling in Drupal Admin Audit Trail, allowing excessive allocation. Recommendations: For versions 0.0....

PT-2025-25222 · Drupal · Drupal Lightgallery

Name of the Vulnerable Software and Affected Versions: Drupal Lightgallery versions 0.0.0 through 1.6.0 Description: The issue affects Drupal Lightgallery, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations: For versions 0.0.0...

Drupal Commerce Eurobank (Redirect) 安全漏洞

Drupal Commerce Eurobank Redirect is a redirect banking tool for the Drupal community. A security vulnerability exists in Drupal Commerce Eurobank Redirect versions prior to 2.1.1, which stems from improper authorization and could lead to feature abuse...

PT-2025-25218 · Drupal · Drupal Quick Node Block

Name of the Vulnerable Software and Affected Versions: Drupal Quick Node Block versions 0.0.0 through 1.9.9 Description: The issue is related to a Missing Authorization vulnerability in Drupal Quick Node Block, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 1.9.9,...

PT-2025-25220 · Drupal · Drupal Commerce Eurobank

Name of the Vulnerable Software and Affected Versions: Drupal Commerce Eurobank Redirect versions 0.0.0 through 2.1.0 Description: The issue is related to an Incorrect Authorization vulnerability, allowing functionality misuse. Recommendations: For versions 0.0.0 through 2.1.0, update to version...

PT-2025-25219 · Drupal · Drupal Quick Node Block

Name of the Vulnerable Software and Affected Versions: Drupal Quick Node Block versions 0.0.0 through 1.9.9 Description: The issue is related to a Missing Authorization vulnerability in Drupal Quick Node Block, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 1.9.9,...

Drupal Admin Audit Trail 安全漏洞

Drupal Admin Audit Trail is an administrator audit tool for the Drupal community. A security vulnerability exists in Drupal Admin Audit Trail versions prior to 1.0.5, which stems from an unrestricted resource allocation that could lead to over-allocation...

Drupal Quick Node Block 安全漏洞

Drupal Quick Node Block is a Drupal plugin for the Drupal community. A security vulnerability exists in Drupal Quick Node Block versions prior to 2.0.0, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-25221 · Drupal · Drupal Commerce Alphabank Redirect

Name of the Vulnerable Software and Affected Versions: Drupal Commerce Alphabank Redirect versions 0.0.0 through 1.0.2 Description: The issue is related to an Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect, allowing functionality misuse. Recommendations: For versions...

Drupal Lightgallery 跨站脚本漏洞

Drupal Lightgallery is a plugin for the Drupal community. A cross-site scripting vulnerability exists in Drupal Lightgallery versions prior to 1.6.0 that stems from improper input neutralization and could lead to a cross-site scripting attack...

BIT-DRUPAL-2025-31675 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.14, from 10.4.0 before 10.4.5, from 11.0.0 before 11.0.13, from 11.1.0 before 11.1.5. It al...

BIT-DRUPAL-2025-31673 Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002

Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

BIT-DRUPAL-2024-55638 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

BIT-DRUPAL-2024-55637 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

BIT-DRUPAL-2024-55636 Drupal core - Less critical - Gadget chain - SA-CORE-2024-006

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...