Mozilla Firefox SEoL (103.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

IBM DB2 SEoL (<= 7.1.x)

According to its version, IBM DB2 is less than or equal to 7.1.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

Mozilla Firefox SEoL (97.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Mozilla Thunderbird SEoL (16.x)

According to its version, Mozilla Thunderbird version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...

Mozilla Firefox SEoL (74.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

CVE-2024-13311

CVE-2024-13311 describes a vulnerability in Drupal related to the Allow All File Extensions for file fields feature. The consolidated records indicate Drupal’s file field extension filtering can be bypassed, enabling potential impact to file handling. The available metrics from the CVE entry show...

CVE-2024-13310 Git Utilities for Drupal - Critical - Unsupported - SA-CONTRIB-2024-074

Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal:...

CVE-2024-13310

CVE-2024-13310 corresponds to a vulnerability in Drupal Git Utilities for Drupal (Git Utilities module). The connected PT-2024-10078 entry describes the issue as related to insufficient protection of service data in the Git Utilities module for Drupal, enabling a remote attacker to read, modify, ...

CVE-2024-13300 Print Anything - Critical - Unsupported - SA-CONTRIB-2024-066

Vulnerability in Drupal Print Anything.This issue affects Print Anything:...

CVE-2024-13300

CVE-2024-13300 concerns a vulnerability in the Drupal Print Anything module. Connected sources describe a remote code execution impact stemming from insufficient input validation in the Print Anything module, affecting all versions and enabling an attacker to execute arbitrary code. The issue is ...

CVE-2024-13299 Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299 Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299

Summary: CVE-2024-13299 applies to the Drupal Megamenu Framework module. The issue is caused by insufficient input validation in the Megamenu Framework component, which can be exploited by a remote attacker to execute arbitrary code. What’s affected: Megamenu Framework module for Drupal (versions...

CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049

Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...

CVE-2024-13285

Summary of CVE-2024-13285: This entry concerns a vulnerability in Drupal’s wkhtmltopdf integration. The connected sources indicate the affected component is the wkhtmltopdf integration used within Drupal, but do not provide a concrete product/version range or a root cause description in the docum...

CVE-2024-13285 wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049

Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...

DRUPAL-CONTRIB-2025-002

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Profile Private - Critical - Unsupported - SA-CONTRIB-2025-002

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

USN-7182-1 ceph vulnerability

It was discovered that Ceph incorrectly handled unsupported JWT algorithms in the RadosGW gateway. An attacker could possibly use this issue to bypass certain authentication checks and restrictions...

USN-7182-1: Ceph vulnerability

It was discovered that Ceph incorrectly handled unsupported JWT algorithms in the RadosGW gateway. An attacker could possibly use this issue to bypass certain authentication checks and restrictions...