17692 matches found
DLA-715-1 drupal7 - security update
Bulletin has no description...
Drupal 7.x < 7.52 / 8.x < 8.2.3 Multiple Vulnerabilities
The version of Drupal running on the remote web server is 7.x prior to 7.52 or 8.x prior to 8.2.3. It is, therefore, affected by the multiple vulnerabilities : - An information disclosure vulnerability exists in the taxonomy module when using access query tags that are inconsistent with the...
[ASA-201611-20] drupal: multiple issues
Arch Linux Security Advisory ASA-201611-20 ========================================== Severity: Medium Date : 2016-11-19 CVE-ID : CVE-2016-9449 CVE-2016-9450 CVE-2016-9452 Package : drupal Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The...
Drupal Fixes 'Moderately Critical' Vulnerabilities in Core Engine
The Drupal Security Team fixed a handful of issues in version 7 and 8 of its content management system core engine this week that could have led to cache poisoning, social engineering attacks and a denial of service condition. Drupal SA-CORE-2016-005 – Moderately Critical Update to Drupal core 7....
Drupal Core Denial of Service Vulnerability (CNVD-2016-11384)
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A denial-of-service vulnerability exists in Drupal Core, which can be exploited by attackers to cause a denial-of-service attack...
Drupal Core Security Bypass Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security bypass vulnerability exists in Drupal Core, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...
Drupal Core Information Disclosure Vulnerability (CNVD-2016-11385)
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An information disclosure vulnerability exists in Drupal Core, which can be exploited by attackers to obtain sensitive information...
PT-2016-7762
Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.52 Description The issue in Drupal makes it easier for remote authenticated users to conduct open redirect attacks. Recommendations For versions prior to 7.52, update to version 7.52 or later to resolve the issue...
DSA-3718-1 drupal7 - security update
Bulletin has no description...
PT-2016-7760
Name of the Vulnerable Software and Affected Versions Drupal versions 7.x prior to 7.52 Drupal versions 8.x prior to 8.2.3 Description The issue might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags in th...
Denial of service via transliterate mechanism
More info at https://www.drupal.org/SA-CORE-2016-005...
Inconsistent name for term access query
More info at https://www.drupal.org/SA-CORE-2016-005...
Incorrect cache context on password reset page
More info at https://www.drupal.org/SA-CORE-2016-005...
Inconsistent name for term access query
More info at https://www.drupal.org/SA-CORE-2016-005...
Denial of service via transliterate mechanism
More info at https://www.drupal.org/SA-CORE-2016-005...
Drupal Code -- Multiple Vulnerabilities
The Drupal development team reports: Inconsistent name for term access query Less critical - Drupal 7 and Drupal 8 Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain entities by...
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005
Description Inconsistent name for term access query Less critical - Drupal 7 and Drupal 8 Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain entities by implementing...
Drupal D8 Editor File upload module cross-site scripting vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.File is one of the file handling modules. A cross-site scripting vulnerability exists in the Drupal D8 Editor File upload module that stems from a failure to properly validate user inpu...
Drupal Views Send Module Cross-Site Scripting Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. View sending enables you to send emails to multiple users from a single view. A cross-site scripting vulnerability exists in the Drupal Views Send module due to the program failing to...
Drupal Workbench Moderation Module Information Disclosure Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.The Workbench Moderation module enables you to customize the editorial workflow in your website. An information disclosure vulnerability exists in the Drupal Workbench Moderation module...