Lucene search
+L

17309 matches found

Github Security Blog
Github Security Blog
•added 2024/01/16 6:30 a.m.•38 views

Drupal Denial of Service vulnerability

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS6.9AI score0.00791EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/01/16 6:30 a.m.•22 views

GHSA-62CF-JVPP-48Q6 Drupal Denial of Service vulnerability

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS7.2AI score0.00791EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/01/16 4:41 a.m.•74 views

Drupal vulnerable to improper handling of structural elements

Overview Drupal provided by Drupal.org contains an improper handling of structural elements vulnerability CWE-237. Shiga Takuma of BroadBand Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

7.5CVSS6.5AI score0.00791EPSS
SaveExploits0References7
NVD
NVD
•added 2024/01/16 4:15 a.m.•40 views

CVE-2024-22362

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS7.3AI score0.00791EPSS
SaveExploits0References4
Prion
Prion
•added 2024/01/16 4:15 a.m.•25 views

Design/Logic Flaw

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

5CVSS6.8AI score0.00791EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/01/16 4:15 a.m.•13 views

UBUNTU-CVE-2024-22362

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS6.7AI score0.00791EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/01/16 3:39 a.m.•6 views

CVE-2024-22362

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.2AI score0.00791EPSS
SaveExploits0References4
Mend
Mend
•added 2024/01/16 3:39 a.m.•4 views

CVE-2024-22362

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

8.7CVSS0.00791EPSS
SaveExploits0References7
CVE
CVE
•added 2024/01/16 3:39 a.m.•135 views

CVE-2024-22362

CVE-2024-22362 affects Drupal core and leads to a DoS through improper handling of structural elements. External documents consistently describe a remote, unauthenticated network-exposed impact with high severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Several feeds corroborate DoS impli...

7.5CVSS7.2AI score0.00791EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/01/16 3:39 a.m.•30 views

CVE-2024-22362

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS7.4AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•38 views

Drupal Security Vulnerabilities

Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal version 9.3.6, which stems from the presence of a Denial of Service DoS vulnerability...

7.5CVSS6.9AI score0.00791EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2024/01/16 12:00 a.m.•48 views

CVE-2024-22362

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS6.7AI score0.00791EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•1 views

CVE-2024-22362: Uncontrolled Resource Consumption

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...

7.5CVSS6.7AI score0.00791EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/01/16 12:00 a.m.•59 views

JVN#63383723: Drupal vulnerable to improper handling of structural elements

Drupal provided by Drupal.org contains an improper handling of structural elements vulnerability CWE-237. Impact An attacker may be able to cause a denial-of-service DoS condition. Solution Update the Software Update the software to the latest version 10 series according to the information provid...

7.5CVSS7.2AI score0.00791EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/01/15 12:00 a.m.•13 views

PT-2024-19364 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal affected versions not specified Description: The issue is related to improper handling of structural elements, which can lead to a denial-of-service DoS condition if exploited by an attacker. Recommendations: At the moment, there is no...

7.5CVSS7.2AI score0.00791EPSS
SaveExploits0References18
OSV
OSV
•added 2024/01/11 3:43 p.m.•29 views

GHSA-XQ62-62C9-22MG Drupal Improper Access Control

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4...

9.8CVSS9.3AI score0.02202EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/01/11 3:43 p.m.•34 views

Drupal Improper Access Control

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4...

9.8CVSS7.1AI score0.02202EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2024/01/10 6:00 p.m.•15 views

DRUPAL-CONTRIB-2024-002

The Typogrify module brings the typographic refinements of Typogrify to Drupal. It provides a text filter and a Twig filter. The typogrify Twig filter can be used to bypass the Twig auto-escape feature, leading to a persistent Cross Site Scripting XSS vulnerability. This vulnerability is mitigate...

5.4CVSS6.1AI score0.00223EPSS
SaveExploits0References1
Drupal
Drupal
•added 2024/01/10 12:00 a.m.•39 views

Typogrify - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-002

The Typogrify module brings the typographic refinements of Typogrify to Drupal. It provides a text filter and a Twig filter. The typogrify Twig filter can be used to bypass the Twig auto-escape feature, leading to a persistent Cross Site Scripting XSS vulnerability. This vulnerability is mitigate...

5.4CVSS6.2AI score0.00223EPSS
SaveExploits0References6
HackRead
HackRead
•added 2023/12/21 12:36 p.m.•30 views

8220 Gang Targets Telecom and Healthcare in Global Cryptojacking Attack

By Deeba Ahmed The 8220 gang, believed to be of Chinese origins, was first identified in 2017 by Cisco Talos when they targeted Drupal, Hadoop YARN, and Apache Struts2 applications for propagating cryptojacking malware. This is a post from HackRead.com Read the original post: 8220 Gang Targets...

7.2AI score
SaveExploits0
Rows per page
Query Builder