15517 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-25271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow a...
GHSA-52F5-9888-HMC6 vulnerabilities
Vulnerabilities for packages: lerna, py3-jupyterlab, vitess, kubeflow-centraldashboard, drupal, opensearch-dashboards, kubeflow-katib, kibana, prism, homepage, saf, tensorflow-cpu-jupyter, arangodb, opensearch-dashboards-fips...
CVE-2025-54798 vulnerabilities
Vulnerabilities for packages: lerna, py3-jupyterlab, vitess, kubeflow-centraldashboard, drupal, opensearch-dashboards, kubeflow-katib, kibana, prism, homepage, saf, tensorflow-cpu-jupyter, arangodb, opensearch-dashboards-fips...
Linux Distros Unpatched Vulnerability : CVE-2017-6927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain JavaScript function which is used to escape potentially dangerous...
Linux Distros Unpatched Vulnerability : CVE-2017-6928
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the use...
Linux Distros Unpatched Vulnerability : CVE-2017-6932
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in...
Linux Distros Unpatched Vulnerability : CVE-2024-22362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a...
Linux Distros Unpatched Vulnerability : CVE-2022-25273
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow a...
Linux Distros Unpatched Vulnerability : CVE-2015-7943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module...
Linux Distros Unpatched Vulnerability : CVE-2019-6338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR ArchiveTar library. This library...
Linux Distros Unpatched Vulnerability : CVE-2015-3231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed b...
Linux Distros Unpatched Vulnerability : CVE-2015-3234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from...
Linux Distros Unpatched Vulnerability : CVE-2007-6752
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests th...
Linux Distros Unpatched Vulnerability : CVE-2014-5019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of service via a crafted HTTP Host header, related...
Linux Distros Unpatched Vulnerability : CVE-2014-5266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Incutio XML-RPC IXR Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an X...
Linux Distros Unpatched Vulnerability : CVE-2014-5267
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to have unspecified impact via a crafted DOCTYPE declaration in an...
Linux Distros Unpatched Vulnerability : CVE-2016-3169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the...
Linux Distros Unpatched Vulnerability : CVE-2019-6341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsyst...
Linux Distros Unpatched Vulnerability : CVE-2016-3162
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows remote authenticated users to bypass access restrictions and read, delete, or substitute a...
Linux Distros Unpatched Vulnerability : CVE-2014-9016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes aka phpass module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to...