Fedora 29 : drupal7-ds (2019-5258ea8ae2)

https://www.drupal.org/project/ds/releases/7.x-2.16 - https://www.drupal.org/project/ds/releases/7.x-2.15 - Critical - Cross site scripting XSS - SA-CONTRIB-2018-019 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 29 : drupal7-xmlsitemap (2019-f219dbb548)

https://www.drupal.org/project/xmlsitemap/releases/7.x-2.6 - https://www.drupal.org/project/xmlsitemap/releases/7.x-2.5 - https://www.drupal.org/project/xmlsitemap/releases/7.x-2.4 - Moderately critical - Information Disclosure - SA-CONTRIB-2018-053 -...

Fedora 30 : drupal7-uuid (2019-e454116a1a)

https://www.drupal.org/project/uuid/releases/7.x-1.2 - https://www.drupal.org/project/uuid/releases/7.x-1.1 - Moderately critical - Arbitrary file upload - SA-CONTRIB-2018-045 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 29 : drupal7-context (2019-62eba285ee)

https://www.drupal.org/project/context/releases/7.x-3.10 - Moderately critical - Cross site scripting - SA-CONTRIB-2019-028 - https://www.drupal.org/project/context/releases/7.x-3.9 - https://www.drupal.org/project/context/releases/7.x-3.8 Note that Tenable Network Security has extracted the...

Fedora 29 : drupal7-module_filter (2019-0e10310204)

https://www.drupal.org/project/modulefilter/releases/7.x-2.2 - Moderately critical - Cross site scripting - SA-CONTRIB-2019-042 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 30 : drupal7-xmlsitemap (2019-0b26efb6b8)

https://www.drupal.org/project/xmlsitemap/releases/7.x-2.6 - https://www.drupal.org/project/xmlsitemap/releases/7.x-2.5 - https://www.drupal.org/project/xmlsitemap/releases/7.x-2.4 - Moderately critical - Information Disclosure - SA-CONTRIB-2018-053 -...

CVE-2019-10123

SQL Injection in Advanced InfoData Systems AIS ESEL-Server 67 which is the backend for the AIS logistics mobile app allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user...

PT-2019-11586

Name of the Vulnerable Software and Affected Versions: Advanced InfoData Systems AIS ESEL-Server version 67 Description: The issue allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the sa user...

TableField - Moderately critical - Access bypass and Cross Site Scripting - SA-CONTRIB-2019-051

This module allows you to attach tabular data to an entity. Access bypass There's no access check for users with an "Export Tablefield Data as CSV". They can export data from unpublished nodes or otherwise inaccessible entities. This vulnerability is mitigated by the fact that an attacker must ha...

Fedora 28 : drupal7 (2019-41d6ffd6f0)

https://www.drupal.org/project/drupal/releases/7.67 - SA-CORE-2019-007 CVE-2019-11831 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 29 : drupal7 (2019-040857fd75)

https://www.drupal.org/project/drupal/releases/7.67 - SA-CORE-2019-007 CVE-2019-11831 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Exploit for Deserialization of Untrusted Data in Drupal

CVE-2019-6340 Drupal8's REST RCE, SA-CORE-2019-003 0x01 d...

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00213)

Multiple potential security vulnerabilities in Intel Active Management Technology AMT may allow escalation of privilege, information disclosure, and/or denial of service DoS. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Workflow - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-049

The Workflow module enables you to create arbitrary Workflows, and assign them to Entities. The module doesn't sufficiently escape HTML in the field settings leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the...

Drupal 8.7.x < 8.7.1 Third-Party Libraries Vulnerability

According to its self-reported version, the instance of Drupal running on the remote web server is 7.0.x prior to 7.67, 8.6.x prior to 8.6.16, or 8.7.x prior to 8.7.1. It is, therefore, affected by a path traversal vulnerability. This security release fixes third-party dependencies included in or...

Drupal 7.x < 7.67 Third-Party Libraries Vulnerability

According to its self-reported version, the instance of Drupal running on the remote web server is 7.0.x prior to 7.67, 8.6.x prior to 8.6.16, or 8.7.x prior to 8.7.1. It is, therefore, affected by a path traversal vulnerability. This security release fixes third-party dependencies included in or...

Opigno forum - Less critical - Access bypass - SA-CONTRIB-2019-046

In certain circumstances it is possible that certain forum information is available to unprivileged users because the access check is done with node access instead of grants. This vulnerability is mitigated by the fact that the module itself does not disclose information but only if there are...

EulerOS Virtualization 3.0.1.0 : openssh (EulerOS-SA-2019-1426)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, whi...

Drupal Third-party Libraries Vulnerability (SA-CORE-2019-007) - Linux

Drupal is prone to a vulnerability in the 3rd party library Phar Stream Wrapper. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 28 : drupal8 (2019-1a3edd7e8a)

https://www.drupal.org/project/drupal/releases/8.6.15 - https://www.drupal.org/SA-CORE-2019-005 CVE-2019-10909 / CVE-2019-10910 / CVE-2019-10911 - https://www.drupal.org/SA-CORE-2019-006 CVE-2019-11358 - https://www.drupal.org/project/drupal/releases/8.6.14 Note that Tenable Network Security has...