Quick Edit - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-137

This module enables you to in-place edit entities' fields. The module doesn't sufficiently filter entity titles under the scenario where the user starts in-place editing an entity. The module also doesn't sufficiently filter node titles under the scenario where a node is displayed albeit only on...

[SECURITY] Fedora 22 Update: drupal7-path_breadcrumbs-3.3-1.fc22

Path breadcrumbs module helps you to create breadcrumbs for any page with a ny selection rules and load any entity from the URL. Features Breadcrumbs navigation may be added to any kind of page: static example: node/1 or dynamic example: node/NID. You can load contexts from URL and use it like...

[SECURITY] Fedora 21 Update: drupal7-path_breadcrumbs-3.3-1.fc21

Path breadcrumbs module helps you to create breadcrumbs for any page with a ny selection rules and load any entity from the URL. Features Breadcrumbs navigation may be added to any kind of page: static example: node/1 or dynamic example: node/NID. You can load contexts from URL and use it like...

Drupal OSF for Drupal Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. osf for Drupal is one of the middle-tier modules that allows customization tools and data display for internally structured data RDF and related vocabularies ontologies. A cross-site...

Drupal OSF for Drupal Module Arbitrary File Deletion Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. osf for Drupal is one of the middle-tier modules that allows customization tools and data display for internally structured data RDF and related vocabularies ontologies. An arbitrary...

Drupal OSF for Drupal module cross-site request forgery vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. osf for Drupal is one of the middle-tier modules that allows customization tools and data display for internally structured data RDF and related vocabularies ontologies. A cross-site...

Drupal Time Tracker Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Time Tracker is one of the time tracking system modules. A cross-site scripting vulnerability exists in the Drupal Time Tracker module, which stems from the program's failure to...

Drupal Administration Views Module Information Disclosure Vulnerability

Drupal is a free, open source content management system developed in PHP.Administration Views is a module for replacing administration overview or list pages. A security vulnerability exists in the Drupal Administration Views module that allows remote attackers to submit special requests to obtai...

Several Critical Flaws Patched in Drupal Module

There are several critical vulnerabilities in a middleware layer used in Drupal, including both cross-site scripting and cross-site request forgery bugs, that can be exploited remotely. The vulnerabilities are in the Open Semantic Framework, which is a third-party project and not part of the Drup...

OSF for Drupal - Critical - Multiple vulnerabilities - SA-CONTRIB-2015-134

The Open Semantic Framework OSF for Drupal is a middleware layer that allows structured data RDF and associated vocabularies ontologies to "drive" tailored tools and data displays within Drupal. The module is vulnerable to reflected Cross Site Scripting XSS because it did not sufficiently filter...

Drupal Path Breadcrumbs Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Path Breadcrumbs is one of the website breadcrumb path modules. A cross-site scripting vulnerability exists in the Drupal Path Breadcrumbs module in versions 7.x-3.3 prior to 7.x-3.x. T...

Time Tracker - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-135

This module enables you to track time on entities and comments. The module doesn't sufficiently filter notes added to time entries, leading to an XSS/JavaScript injection vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Add Time...

The vulnerability of the Debian GNU/Linux operating system allows a perpetrator to gain access to information processed by the previous user.

Vulnerability of the Drupal subsystem of the Debian GNU/Linux operating system, with no protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to access information processed by the previous user, through analysis of the cache...

Fedora 22 : drupal7-views_bulk_operations-3.3-1.fc22 (2015-11318)

7.x-3.3 See SA-CONTRIB-2015-131 Changes since 7.x-3.2: - Fix security vulnerability, by AdamPS. - Remove an entitylabel workaround that core no longer needs. - Issue 2427381 by axel.rutz: Rules component lacks entity type - Issue 2418751 by anrikun: Archive action fails silently - Issue 2318273 b...

[SECURITY] Fedora 22 Update: drupal7-migrate-2.8-1.fc22

The migrate module provides a flexible framework for migrating content into Drupal from other sources e.g., when converting a web site from another CMS to Drupal. Out-of-the-box, support for creating core Drupal objects such as nodes, users, files, terms, and comments are included - it can easily...

[SECURITY] Fedora 21 Update: drupal7-views_bulk_operations-3.3-1.fc21

This module augments Views by allowing bulk operations to be executed on the displayed rows. It does so by showing a checkbox in front of each node, and adding a select box containing operations that can be applied. Drupal Core or Rules actions can be used. This package provides the following...

[SECURITY] Fedora 21 Update: drupal7-migrate-2.8-1.fc21

The migrate module provides a flexible framework for migrating content into Drupal from other sources e.g., when converting a web site from another CMS to Drupal. Out-of-the-box, support for creating core Drupal objects such as nodes, users, files, terms, and comments are included - it can easily...

[SECURITY] Fedora 22 Update: drupal7-views_bulk_operations-3.3-1.fc22

This module augments Views by allowing bulk operations to be executed on the displayed rows. It does so by showing a checkbox in front of each node, and adding a select box containing operations that can be applied. Drupal Core or Rules actions can be used. This package provides the following...

[SECURITY] Fedora 21 Update: drupal7-feeds-2.0-0.12.alpha9.fc21

Import or aggregate data as nodes, users, taxonomy terms or simple database records. This package provides the following Drupal modules: feeds feedsimport feedsnews requires drupal7-features and drupal7-views feedsui...

[SECURITY] Fedora 22 Update: drupal7-feeds-2.0-0.12.alpha9.fc22

Import or aggregate data as nodes, users, taxonomy terms or simple database records. This package provides the following Drupal modules: feeds feedsimport feedsnews requires drupal7-features and drupal7-views feedsui...