Drupal Profile Private 安全漏洞

Drupal Profile Private is a feature or module in the Drupal community for creating private user profiles in Drupal. A security vulnerability exists in Drupal Profile Private, which stems from a known security issue, where an attack requires administrator privileges and affects the confidentiality...

PT-2025-13865 · Drupal · Drupal Link Field Display Mode Formatter

Name of the Vulnerable Software and Affected Versions: Drupal Link field display mode formatter versions 0.0.0 through 1.6.0 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, in the Drupal Link field displa...

Drupal AI 跨站请求伪造漏洞

Drupal AI is a module or solution from the Drupal community that integrates artificial intelligence capabilities. A cross-site request forgery vulnerability exists in Drupal AI versions prior to 1.0.2 that stems from cross-site request forgery...

Drupal General Data Protection Regulation 跨站请求伪造漏洞

Drupal General Data Protection Regulation is a module of the Drupal community. A cross-site request forgery vulnerability exists in Drupal General Data Protection Regulation versions prior to 3.0.1 and versions prior to 3.1.0 through 3.1.2, which stems from cross-site request forgery...

Drupal OAuth2 Server 安全漏洞

Drupal OAuth2 Server is an authentication module for the Drupal community. A security vulnerability exists in Drupal OAuth2 Server versions prior to 2.1.0 that stems from a lack of authorization and could lead to forced browsing...

Drupal Open Social 安全漏洞

Drupal Open Social is a Drupal-based social networking platform solution from the Drupal community designed to provide a complete social networking capability for businesses, organizations or communities. A security vulnerability exists in Drupal Open Social versions prior to 12.3.11 and 12.4.0...

Drupal AI 安全漏洞

Drupal AI is a module or solution for the Drupal community that integrates artificial intelligence capabilities. A security vulnerability exists in Drupal AI versions prior to 1.0.3, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-13862 · Drupal · Drupal Ai

Name of the Vulnerable Software and Affected Versions: Drupal AI Artificial Intelligence versions 0.0.0 through 1.0.4 Description: The issue is related to an OS Command Injection vulnerability due to improper neutralization of special elements used in an OS command. This allows for OS Command...

PT-2025-13838 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.12 Drupal core versions 10.4.0 through 10.4.2 Drupal core versions 11.0.0 through 11.0.11 Drupal core versions 11.1.0 through 11.1.2 Description: The issue is related to an Improperly Controlled...

Drupal core 跨站脚本漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A cross-site scripting vulnerability exists in Drupal core that stems from improper input neutralization and could lead to cross-site scripting...

Drupal Flattern 安全漏洞

Drupal Flattern is a Bootstrap-based responsive theme for the Drupal community that provides a clean, modern front-end design for Drupal websites, commonly used for enterprise sites and blogs. A security vulnerability exists in Drupal Flattern, which stems from the presence of a known security...

Drupal Open Social 安全漏洞

Drupal Open Social is a Drupal-based social networking platform solution from the Drupal community designed to provide a complete social networking capability for businesses, organizations or communities. A security vulnerability exists in Drupal Open Social versions prior to 12.3.11 and 12.4.0...

PT-2025-13853 · Drupal · Drupal General Data Protection Regulation

Name of the Vulnerable Software and Affected Versions: Drupal General Data Protection Regulation versions 0.0.0 through 3.0.1, versions 3.1.0 through 3.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This is a type of...

gifplayer 跨站脚本漏洞

gifplayer is a customizable jquery plugin by Ruben Torres, a personal developer. A cross-site scripting vulnerability exists in gifplayer versions prior to 0.3.7 that stems from cross-site scripting...

Drupal AI 操作系统命令注入漏洞

Drupal AI is a module or solution for the Drupal community that integrates artificial intelligence capabilities. An operating system command injection vulnerability exists in Drupal AI versions prior to 1.0.5, which stems from improper neutralization of a special element and could lead to os...

Drupal Configuration Split 跨站请求伪造漏洞

Drupal Configuration Split is a module in the Drupal community. A cross-site request forgery vulnerability exists in Drupal Configuration Split versions prior to 1.10.0 and versions prior to 2.0.0 through 2.0.2, which stems from cross-site request forgery...

Drupal core 跨站脚本漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A cross-site scripting vulnerability exists in Drupal core that stems from vulnerability to cross-site scripting attacks...

@clevercanyon/madrun (>=1.0.0, <=1.0.1), @snyk/snyk-cocoapods-plugin (2.6.0) +8 more potentially affected by CVE-2025-30222 via shescape (>=1.7.4, <=2.1.0)

shescape NPM version =1.7.4, =1.0.0, =0.1.2, =1.0.0, =1.0.0, =1.5.1, =6.5.0, =0.0.0-experimental-20221114-610843f6, =0.34.0-experimental.c2191de Source cves: CVE-2025-30222 Source advisory: OSV:GHSA-66PP-5P9W-Q87J...

Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities

Summary There are vulnerabilities in IBM® Java™, IBM WebSphere Application Server Liberty and Open-Source Software OSS components used by IBM Cognos Analytics. Additionally, IBM Cognos Analytics is vulnerable to Open URL Redirection and Link Manipulation vulnerabilities. For more information abou...

Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary jQuery is used by IBM Robotic Process Automation for Cloud Pak as part of Abbyy CVE-2015-9251, CVE-2019-11358, CVE-2020-11022, CVE-2020-11023, CVE-2020-23064. Kubernetes kube-apiserver is used by IBM Robotic Process Automation for Cloud Pak as part of the operator CVE-2020-8552. Go Go-Yam...