Lucene search
K

8 matches found

securityvulns
securityvulns
added 2013/10/13 12:0 a.m.85 views

[SECURITY] [DSA 2776-1] drupal6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2776-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 11, 2013 http://www.debian.org/security/faq -...

6.8CVSS1.4AI score0.02746EPSS
Exploits1
Debian
Debian
added 2013/10/11 2:32 p.m.24 views

[SECURITY] [DSA 2776-1] drupal6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2776-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 11, 2013 http://www.debian.org/security/faq -...

6.8CVSS6.1AI score0.02746EPSS
Exploits1
OpenVAS
OpenVAS
added 2013/01/08 12:0 a.m.27 views

Fedora Update for drupal6 FEDORA-2012-20766

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6CVSS6.5AI score0.02746EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/01/08 12:0 a.m.30 views

Fedora Update for drupal7 FEDORA-2012-20794

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS7.7AI score0.03008EPSS
Exploits1References2
Cvelist
Cvelist
added 2013/01/03 1:0 a.m.23 views

CVE-2012-5651

Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results...

5.9AI score0.02746EPSS
Exploits0References9
CVE
CVE
added 2013/01/03 1:0 a.m.123 views

CVE-2012-5651

CVE-2012-5651 affects Drupal 6.x (before 6.27) and Drupal 7.x (before 7.18). The vulnerability causes information disclosure by exposing results that include blocked users in search results, enabling remote attackers to read sensitive data via the search functionality. The issue is documented acr...

5CVSS6AI score0.02746EPSS
Exploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/12/21 12:0 a.m.44 views

Drupal 6.x < 6.27 / 7.x < 7.18 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 6.x prior to 6.27 or 7.x prior to 7.18. It is, therefore, potentially affected by multiple vulnerabilities : - An access bypass vulnerability exists that allows search results to improperly display information about blocked users...

6CVSS6.6AI score0.02746EPSS
Exploits1References4
Drupal
Drupal
added 2012/12/19 12:0 a.m.612 views

SA-CORE-2012-004 - Drupal core - Multiple vulnerabilities

Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. Access bypass User module search - Drupal 6 and 7 A vulnerability was identified that allows blocked users to appear in user search results, even when the search results are viewed by unprivileged users. This...

6CVSS6.9AI score0.02746EPSS
Exploits1References27
Rows per page
Query Builder