CVE-2024-13300 Print Anything - Critical - Unsupported - SA-CONTRIB-2024-066

Vulnerability in Drupal Print Anything.This issue affects Print Anything:...

CVE-2024-13299 Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299 Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299

Summary: CVE-2024-13299 applies to the Drupal Megamenu Framework module. The issue is caused by insufficient input validation in the Megamenu Framework component, which can be exploited by a remote attacker to execute arbitrary code. What’s affected: Megamenu Framework module for Drupal (versions...

CVE-2024-13298 Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...

CVE-2024-13298

CVE-2024-13298 affects the Drupal Tarte au Citron module. The issue is improper neutralization of input during web page generation, enabling Cross‑Site Scripting (XSS). Affected: Tarte au Citron module versions 2.0.0 before 2.0.5. The problem arises in the module’s handling of input that can be i...

CVE-2024-13298 Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...

CVE-2024-13298 Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...

CVE-2024-13297 Eloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063

Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X- before 7.X-1.15...

CVE-2024-13297 Eloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063

Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X- before 7.X-1.15...

CVE-2024-13297 Eloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063

Deserialization of Untrusted Data vulnerability in Drupal Eloqua allows Object Injection.This issue affects Eloqua: from 7.X- before 7.X-1.15...

CVE-2024-13297

CVE-2024-13297 describes a deserialization of untrusted data vulnerability in the Drupal Eloqua integration/module, allowing PHP object injection that could lead to arbitrary code execution. Affected: Eloqua versions 7.X-* before 7.X-1.15 (via the Eloqua Drupal module). The issue is surfaced in t...

CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...

CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...

CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...

CVE-2024-13296

CVE-2024-13296 describes a Deserialization of Untrusted Data vulnerability in the Drupal Mailjet module, enabling Object Injection. Affected versions are Mailjet 0.0.0 up to (but not including) 4.0.1. The root cause is insecure deserialization within the Mailjet Drupal module, potentially allowin...

CVE-2024-13295 Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X- before 7.X-3.3...

CVE-2024-13295

CVE-2024-13295 affects Drupal Node export module for Drupal 7.X-* before 7.X-3.3. Root cause is deserialization of untrusted data, leading to object injection and potential arbitrary code execution. Affected software: Drupal Node export module (7.X-*, prior to 7.X-3.3). Impact per sources: possib...

CVE-2024-13295 Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X- before 7.X-3.3...

CVE-2024-13295 Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X- before 7.X-3.3...