16048 matches found
Fedora 25 : drupal7 (2017-38113758e7)
7.56 - SA-CORE-2017-003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 24 : drupal7 (2017-e8a2017b3c)
7.56 - SA-CORE-2017-003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
uaca.ac.cr XSS vulnerability
Vulnerable URL: http://www.uaca.ac.cr/rofilitrix?filesrc=C:/inetpub/wwwroot/drupal/sites/all/modules/contrib/date/dateapi/theme/theme.inc"'--!=C:/inetpub/wwwroot/drupal/sites/all/modules/contrib/date/dateapi/theme Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...
[SECURITY] Fedora 25 Update: drupal7-7.56-1.fc25
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[SECURITY] Fedora 24 Update: drupal7-7.56-1.fc24
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
hechoendrupal.gitbooks.io XSS vulnerability
Vulnerable URL: https://hechoendrupal.gitbooks.io/drupal-console/content/en/commands/user-login-url.html/...
Fedora 24 : drupal8 (2017-3159dd230a)
8.3.4 - Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003 - 8.3.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 25 : drupal8 (2017-0d636042ef)
8.3.4 - Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003 - 8.3.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 25 Update: drupal8-8.3.4-1.fc25
Drupal is an open source content management platform powering millions of websites and applications. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs built, used, and supported by an active and diverse community of people around the world...
[SECURITY] Fedora 24 Update: drupal8-8.3.4-1.fc24
Drupal is an open source content management platform powering millions of websites and applications. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs built, used, and supported by an active and diverse community of people around the world...
Drupal SMTP Authentication Support Module Information Disclosure Vulnerability
Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An information disclosure vulnerability exists in the Drupal SMTP Authentication Support module. An attacker c...
MGASA-2017-0198 Updated drupal packages fix security vulnerability
Greg Knaddison, Mori Sugimoto and iancawthorne discovered that files uploaded by anonymous users into a private file system can be accessed by other anonymous users leading to an access bypass vulnerability CVE-2017-6922...
Updated drupal packages fix security vulnerability
Greg Knaddison, Mori Sugimoto and iancawthorne discovered that files uploaded by anonymous users into a private file system can be accessed by other anonymous users leading to an access bypass vulnerability CVE-2017-6922...
Drupal Services module SQL injection vulnerability
Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. A SQL injection vulnerability exists in the Drupal Services module, which can be exploited by attackers to...
Debian DLA-1004-1 : drupal7 security update
Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass...
[SECURITY] [DLA 1004-1] drupal7 security update
Package : drupal7 Version : 7.14-2+deb7u16 CVE ID : CVE-2017-6922 Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not...
Services - Critical - SQL Injection - SA-CONTRIB-2017-054
This module provides a standardized solution for building API's so that external clients can communicate with Drupal. The module doesn't sufficiently sanitize column names provided by the client when they are querying for data and trying to sort it. This vulnerability is mitigated by the fact tha...
SMTP - Moderately Critical - Information Disclosure - SA-CONTRIB-2017-055
This SMTP module enables you to send mail using a third party non-system mail service instead of the local system mailer included with Drupal. When this module is in debugging mode, it will log privileged information. CVE identifiers issued ACVE identifier will be requested, and added upon...
Remote Code Execution (RCE) Through YAML Deserialization
Drupal is vulnerable to remote code execution RCE attacks. The YAML parser does not safely deserialize PHP objects, allowing a malicious user to inject and execute arbitrary code...