EUVD-2012-2069

Malware in sbrugna...

EUVD-2008-1974

Malware in sbrugna...

EUVD-2008-6139

Malware in sbrugna...

EUVD-2013-2198

Malware in sbrugna...

EUVD-2009-3332

Malware in sbrugna...

EUVD-2009-3334

Malware in sbrugna...

EUVD-2009-3336

Malware in sbrugna...

EUVD-2013-4101

Malware in sbrugna...

EUVD-2008-0830

Malware in sbrugna...

EUVD-2015-3400

Malware in sbrugna...

EUVD-2022-4784

Malicious code in bioql PyPI...

EUVD-2022-3090

Malicious code in bioql PyPI...

Ubuntu 14.04 LTS / 16.04 LTS : Drupal vulnerabilities (USN-7658-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7658-1 advisory. It was discovered that Drupal incorrectly parsed untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code...

CVE-2025-6674 CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor5 Youtube allows Cross-Site Scripting XSS.This issue affects CKEditor5 Youtube: from 0.0.0 before 1.0.3...

CVE-2025-48915

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting XSS.This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.15...

CVE-2025-48013

CVE-2025-48013 affects the Drupal Quick Node Block. It is a Missing Authorization vulnerability that enables forceful browsing of rendered nodes for versions 0.0.0 through 1.9.9 (affected up to before 2.0.0). Root cause: lack of authorization checks in the Quick Node Block module. Impact: unautho...

CVE-2010-2158

Multiple cross-site scripting XSS vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the 1 fullname, 2 phone, or 3 im parameter in a stormperson action to index.php...

CVE-2012-5553

Multiple cross-site scripting XSS vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the 1 Menu Title 2 Link Title, 3 Path...

CVE-2012-1654

Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...

CVE-2015-8754

The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom blacklist via unspecified vectors...