17700 matches found
Drupal Coder Remote Code Execution Vulnerability
Drupal is a free, open-source content management system developed in the PHP language maintained by the Drupal community; Coder is Drupal's encoder module. A remote code execution vulnerability exists in the Drupal Coder module. Because the module does not adequately validate user-entered script...
Webform Multiple File Upload - Critical - Remote Code Execution - SA-CONTRIB-2016-038
The Webform Multiple File Upload module allows users to upload multiple files on a Webform. The Webform Multifile File Upload module contains a Remote Code Execution RCE vulnerability where form inputs will be unserialized and a specially crafted form input may trigger arbitrary code execution...
Coder - Highly Critical - Remote Code Execution - SA-CONTRIB-2016-039
The Coder module checks your Drupal code against coding standards and other best practices. It can also fix coding standard violations and perform basic upgrades on modules. The module doesn't sufficiently validate user inputs in a script file that has the php extension. A malicious unauthenticat...
RESTWS - Highly critical - Remote code execution - SA-CONTRIB-2016-040
This module enables you to expose Drupal entities as RESTful web services. RESTWS alters the default page callbacks for entities to provide additional functionality. A vulnerability in this approach allows an attacker to send specially crafted requests resulting in arbitrary PHP execution. There...
Drupal RESTWS Remote Code Execution Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote code execution vulnerability exists in the Drupal RESTWS module. An attacker can exploit the vulnerability by sending a specially crafted request that results in...
Drupal RESTWS Module Remote PHP Code Execution
This module exploits a Remote PHP Code Execution vulnerability in the Drupal RESTWS Module. Unauthenticated users can execute arbitrary code under the context of the web server user. RESTWS alters the default page callbacks for entities to provide additional functionality. A vulnerability in this...
Drupal CODER Module Remote Command Execution
This module exploits a Remote Command Execution vulnerability in the Drupal CODER Module. Unauthenticated users can execute arbitrary commands under the context of the web server user. The CODER module doesn't sufficiently validate user inputs in a script file that has the PHP extension. A...
MGASA-2016-0245 Updated drupal packages fix security vulnerabilities
Updated drupal packages fix security vulnerability: A vulnerability exists in the User module, where if some specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the site. This would typically result in the user gainin...
Updated drupal packages fix security vulnerabilities
Updated drupal packages fix security vulnerability: A vulnerability exists in the User module, where if some specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the site. This would typically result in the user gainin...
PT-2016-7968
Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A security issue exists in the User module of Drupal. If specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the...
Drupal 6.22 - menupereid SQL injection vulnerability
No description provided by source...
Instagram Block - Moderately Critical - Information Disclosure - SA-CONTRIB-2016-037
This module enables you to authenticate with Instagram's API via an intermediary service instagram.yanniboi.com. The module doesn't sufficiently advise that your authentication tokens could be intercepted. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in...
[SECURITY] Fedora 23 Update: drupal7-7.44-1.fc23
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[SECURITY] Fedora 22 Update: drupal7-7.44-1.fc22
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[SECURITY] Fedora 24 Update: drupal7-7.44-1.fc24
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
Drupal 7.x < 7.44 / 8.x < 8.1.3 Multiple Vulnerabilities
The version of Drupal running on the remote web server is 7.x prior to 7.44 or 8.x prior to 8.1.3. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the Views module that allows an unauthenticated, remote attacker to bypass restrictions and disclose the number of hi...
FreeBSD : drupal -- multiple vulnerabilities (7932548e-3427-11e6-8e82-002590263bf5)
Drupal Security Team reports : - Saving user accounts can sometimes grant the user all roles User module - Drupal 7 - Moderately Critical - Views can allow unauthorized users to see Statistics information Views module - Drupal 8 - Less Critical %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
DSA-3604-1 drupal7 - security update
Bulletin has no description...
PT-2016-6800
Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.44 Description The issue allows remote authenticated users to gain privileges through certain vectors involving contributed or custom code that triggers a rebuild of the user profile form. Recommendations For version...
