Drupal Twilio模块访问绕过漏洞

No description provided by source...

Drupal Monster Menus模块信息泄露漏洞

No description provided by source...

Drupal web-fixtures\issue130.php 跨站脚本漏洞

No description provided by source...

Encrypt - Moderately Critical - Weak Encryption - SA-CONTRIB-2015-166

This module enables you to encrypt data within Drupal using a user-configurable encryption method and key provider. The module did not sufficiently validate good configurations and api usage resulting in multiple potential weaknesses depending on module usage. The default encryption method could...

CVE-2015-8233

Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...

CVE-2015-8232

The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...

Design/Logic Flaw

The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...

CVE-2015-8232

CVE-2015-8232 affects the Drupal UC Profile module (6.x-1.x) prior to version 6.x-1.3. The vulnerability arises from incomplete access checks when accessing profiles, potentially allowing remote attackers to disclose sensitive information from anonymous user profiles via unspecified vectors. The ...

CVE-2015-8232

The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors...

CVE-2015-8233

Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...

CVE-2015-8233

The MAYO Drupal theme (7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6) is affected by an XSS vulnerability. Root cause: insufficient sanitization in theme settings that remote administrators with the Administer themes permission can exploit to inject arbitrary script/HTML. Impact: potential fo...

[SECURITY] Fedora 21 Update: drupal7-jquery_update-2.7-1.fc21

Upgrades the version of jQuery in Drupal core to a newer version of jQuery. This package provides the following Drupal module: jqueryupdate...

[SECURITY] Fedora 22 Update: drupal7-jquery_update-2.7-1.fc22

Upgrades the version of jQuery in Drupal core to a newer version of jQuery. This package provides the following Drupal module: jqueryupdate...

[SECURITY] Fedora 23 Update: drupal7-jquery_update-2.7-1.fc23

Upgrades the version of jQuery in Drupal core to a newer version of jQuery. This package provides the following Drupal module: jqueryupdate...

Drupal Monster Menus Module Information Disclosure Vulnerability

Drupal is an open source content management framework written in PHP, which consists of a content management system and a PHP development framework. Monster Menus module for Drupal is a module for developing Drupal 6 and Drupal 7 versions of Drupal. An information disclosure vulnerability exists ...

MAYO theme - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-164

MAYO theme enables you to change certain theme settings via the administration interface. Some theme settings aren't sufficiently sanitized. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer themes". CVE identifiers issued CVE-2015-8233...

UC Profile - Moderately Critical - Information Disclosure - SA-CONTRIB-2015-165

UC Profile module enables you to collect profile fields for users during the checkout process of Ubercart as a checkout pane. The module doesn't sufficiently check access to profiles under certain circumstances. Depending on the information being collected, sensitive data may be exposed. This...

Drupal Login Disable Module Security Bypass Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Login Disable is one of the modules that provides login denial functionality. A security vulnerability exists in the Drupal Login Disable module in versions 6.x-1.1 prior to 6.x-1.x and...

CVE-2015-8095

The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an unspecified URL pattern...