UBUNTU-CVE-2015-3233

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

UBUNTU-CVE-2015-3234

The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers...

CVE-2015-3234

The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers...

CVE-2015-3232

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...

CVE-2015-3231

Drupal 7.x (before 7.38) renders cache data by user role in its Render caching system. Affected component is the Render cache, which can leak private content viewed by user 1 to remote authenticated users by reading the cache. Root cause described across multiple sources: caching by user role inc...

CVE-2015-3232

Removed by vendor...

CVE-2015-3233

Removed by vendor...

CVE-2015-3231

The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed by user 1 by reading the cache...

CVE-2015-3233

CVE-2015-3233 is an open redirect vulnerability in the Drupal Overlay module for Drupal 7.x, caused by insufficient URL validation. It affects Drupal 7.x prior to 7.38 (per CVE description). Debi an advisory notes fixes across Drupal7 packages in multiple releases (e.g., Wheezy: 7.14-2+deb7u10; J...

CVE-2015-3234

Removed by vendor...

CVE-2015-3234

The vulnerability CVE-2015-3234 affects the Drupal OpenID module in Drupal 6.x (before 6.36) and 7.x (before 7.38). A remote attacker can authenticate as other users by presenting an OpenID identity from certain providers (e.g., Verisign, LiveJournal, StackExchange). Root cause: improper validati...

CVE-2015-3233

Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2015-3232

CVE-2015-3232 is an open redirect vulnerability in the Drupal Field UI module for Drupal 7.x prior to 7.38. The flaw allows remote attackers to redirect users to arbitrary sites and conduct phishing via the destinations parameter. The vulnerability is tied to the Drupal 7.38 release, which fixes ...

CVE-2015-3231

Removed by vendor...

[SECURITY] Fedora 21 Update: drupal7-views-3.11-1.fc21

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

[SECURITY] Fedora 20 Update: drupal7-views-3.11-1.fc20

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

[SECURITY] Fedora 22 Update: drupal7-views-3.11-1.fc22

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

FreeBSD : drupal -- multiple vulnerabilities (d605edb1-1616-11e5-a000-d050996490d0)

Drupal development team reports : Impersonation OpenID module - Drupal 6 and 7 - Critical A vulnerability was found in the OpenID module that allows a malicious user to log in as other users on the site, including administrators, and hijack their accounts. This vulnerability is mitigated by the...

Drupal 6.x < 6.36 OpenID Security Bypass

The remote web server is running a version of Drupal that is 6.x prior to 6.36. It is, therefore, potentially affected by a security bypass vulnerability due to a flaw in the OpenID module. A remote attacker can exploit this flaw to log in as other users, including administrators. Note that victi...

Drupal 7.x < 7.38 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 7.x prior to 7.38. It is, therefore, potentially affected by the following vulnerabilities : - An open redirect vulnerability exists due to improper validation of user-supplied input to the 'destinations' parameter in the Field UI modul...