17692 matches found
Drupal Releases Security Advisory
Drupal has released an advisory to address vulnerabilities in Drupal core 8.x versions prior to 8.1.10. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Drupal's Security Advisory an...
[SECURITY] Fedora 25 Update: drupal7-google_analytics-2.3-1.fc25
Adds the Google Analytics web statistics tracking system to your website. This package provides the following Drupal module: googleanalytics...
CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
Code injection
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
Design/Logic Flaw
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
UBUNTU-CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
CVE-2016-6212
The CVE-2016-6212 entry concerns Drupal’s Views module (7.x-3.x before 7.x-3.14 and 8.x before 8.1.3) where remote authenticated users could bypass normal access restrictions and obtain sensitive Statistics information via unspecified vectors. The vulnerability arises in the Views module’s handli...
CVE-2016-6211
Summary: CVE-2016-6211 affects Drupal 7.x up to 7.44 in the User module. Vulnerability: remote authenticated users can gain privileges by triggering a rebuild of the user profile form via contributed/custom code. Impact: privilege escalation as described in multiple sources. Evidence: references ...
CVE-2016-6212
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
CVE-2016-6211
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
CVE-2016-6211
Removed by vendor...
PT-2016-6801
Name of the Vulnerable Software and Affected Versions Drupal Views module versions 7.x-3.x before 7.x-3.14 Drupal Views module in Drupal 8.x before 8.1.3 Description The issue might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information...
CVE-2016-6211: Undefined Security Weakness
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...
CVE-2016-6212: Exposure of Sensitive Information to an Unauthorized Actor
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors...
Drupal Flag Lists Module Cross-Site Scripting Vulnerability
Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Flag Lists is one of the modules that allows users to create tagged lists. A cross-site scripting vulnerability exists in the Drupal Flag Lists module. The program fails to adequately...