Drupal Releases Core CMS Updates to Patch Several Vulnerabilities

🗓️ 17 Apr 2019 21:51:00Reported by The Hacker NewsType

Drupal Releases Updates to Patch Security Vulnerabilities in Core CM

Reporter	Title	Published	Views	Family All 120
FreeBSD	drupal -- Drupal core - Moderately critical	17 Apr 201900:00	–	freebsd
BDU FSTEC	The vulnerability of the Unistore.dll library in the Windows operating system, which allows a hacker to disclose protected information	23 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management arises from the lack of protective measures for SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.	1 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the message validation function in symfony/framework-bundle of the Symfony software development and web application management platform lies in the lack of measures to protect website structures, allowing attackers to carry out XSS attacks.	24 Feb 202000:00	–	bdu_fstec
Circl	CVE-2019-10909	16 May 201922:51	–	circl
Circl	CVE-2019-10910	16 May 201922:51	–	circl
CNVD	Drupal Code Execution Vulnerability (CNVD-2019-13248)	22 Apr 201900:00	–	cnvd
CNVD	Drupal cross-site scripting vulnerability (CNVD-2019-13249)	22 Apr 201900:00	–	cnvd
CNVD	Microsoft Windows Information Disclosure Vulnerability (CNVD-2019-22216)	10 Jul 201900:00	–	cnvd
CVE	CVE-2019-10909	16 May 201921:36	–	cve