EUVD-2013-6213

Malware in sbrugna...

EUVD-2015-3288

Malware in sbrugna...

EUVD-2012-1604

Malware in sbrugna...

EUVD-2011-2704

Malware in sbrugna...

EUVD-2014-9543

Malware in sbrugna...

EUVD-2012-2303

Malware in sbrugna...

EUVD-2014-8176

Malware in sbrugna...

EUVD-2015-3287

Malware in sbrugna...

EUVD-2012-0853

Malware in sbrugna...

EUVD-2013-6212

Malware in sbrugna...

EUVD-2015-2840

Malware in sbrugna...

EUVD-2015-6597

Malicious code in bioql PyPI...

EUVD-2022-5661

Malicious code in bioql PyPI...

CVE-2015-7227

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels...

CVE-2024-13291

CVE-2024-13291 concerns Drupal’s Basic HTTP Authentication module. Affected versions are 7.X-1.0 through 7.X-1.3 (and 7.X-1.0 to 7.X-1.3 per PT-2024-10484) with the issue arising from insufficient authorization, enabling forceful browsing (an access-bypass scenario). The vulnerability is fixed in...

Ubuntu 16.04 ESM : Drupal vulnerabilities (USN-4773-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4773-1 advisory. It was discovered that Drupal did not properly process certain input. An attacker could use this vulnerability to execute arbitrary code or completely...

GHSA-96VX-QF28-6F8M Drupal Access Control Bypass

Drupal 7.x before 7.3 allows remote attackers to bypass intended nodeaccess restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table...

GHSA-PQV4-XGQH-J8VH Drupal sensitive information disclosure

The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in...

GHSA-66GR-XRCF-8JPQ Drupal Open Redirect

Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors...

Drupal 7.x < 7.86 Cross-Site Scripting

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.86, 9.2.x prior to 9.2.11, or 9.3.x prior to 9.3.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to its usage of the third party component jQuery UI...