15959 matches found
Drupal Security Vulnerabilities
Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal REST/JSON project 7.x-1.x, which allows blocking user logins...
Drupal REST/JSON Security Vulnerability
Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal REST/JSON project 7.x-1.x that allows user registration bypass...
Drupal Input Validation Error Vulnerability
Drupal is an open source content management system developed in the PHP language by the Drupal community. An input validation error vulnerability exists in Drupal KCFinder version 2018-06-01 and prior versions that stems from incorrectly handling validation...
Drupal Code Issues Vulnerabilities
Drupal is an open source content management system developed in the PHP language by the Drupal community. A code issue vulnerability exists in Drupal REST/JSON project 7.x-1.x that allows guessing session names...
Drupal Security Vulnerabilities
Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal REST/JSON project 7.x-1.x that allows field access bypass...
Drupal Security Vulnerabilities
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal REST/JSON project 7.x-1.x that allows node access bypass...
Drupal Security Vulnerabilities
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal REST/JSON project 7.x-1.x that allows session enumeration...
CVE-2019-25012
The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2019-25012
CVE-2019-25012 (Webform Report for Drupal 7.x-1.x-dev) : The vulnerability allows remote attackers to view submissions by accessing the /rss.xml page. The connected records confirm the affected component is the Webform Report project for Drupal; no further technical details (affected versions bey...
CVE-2018-25002
uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2018-25002
CVE-2018-25002 affects the Drupal KCFinder integration (uploader.php) through 2018-06-01, where input validation is mishandled. The issue originates from the KCFinder integration project and is associated with SA-CONTRIB-2018-024. NVD lists CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack vect...
CVE-2017-20001
The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2017-20001
Technical details for CVE-2017-20001 are not publicly available in the provided documents. Monitor for updates from the listed sources to obtain concrete information on affected products, vulnerability scope, and remediation.
CVE-2016-20001
The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2016-20001
The CVE-2016-20001 entry concerns the Drupal REST/JSON project (7.x-1.x). According to the sources, this module allows a node access bypass, referenced as SA-CONTRIB-2016-033. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE lists) with no explicit exploit details in the p...
CVE-2016-20002
The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2016-20002
CVE-2016-20002 affects the Drupal REST/JSON project (7.x-1.x). The issue is a comment access bypass (SA-CONTRIB-2016-033). The provided documents do not specify the exact root cause, affected methods/files, or explicit fixes. CVSS data from NVD indicates high impact (C/H/I/A) with network exploit...
CVE-2016-20003
The CVE-2016-20003 entry concerns the Drupal REST/JSON project (7.x-1.x) and notes a user enumeration vulnerability. Affected component: REST/JSON project for Drupal; underlying issue allows attackers to enumerate users. Public-facing exploit details or specific versions beyond the 7.x-1.x line a...