Latest vulnerabilities for "drupal drupal" 6.0-rc3

6.1

First published (updated )

CVE-2015-2750

Drupal DrupalReflected file download vulnerability

8.5

First published (updated )

CVE-2016-3168

Drupal DrupalBrute force amplification attacks via XML-RPC

7.5

First published (updated )

CVE-2016-3163

Drupal DrupalCRLF Injection

5.9

First published (updated )

CVE-2016-3166

Drupal DrupalForm API ignores access restrictions on submit buttons

7.5

First published (updated )

CVE-2016-3165

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalOpen redirect via double-encoded 'destination' parameter

7.4

First published (updated )

CVE-2016-3167

Drupal DrupalOpen redirect via path manipulation

7.4

First published (updated )

CVE-2016-3164

Drupal DrupalCode Injection

8.1

First published (updated )

CVE-2016-3171

Drupal DrupalSaving user accounts can sometimes grant the user all roles

8.1

First published (updated )

CVE-2016-3169

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2015-6660

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalXSS

4.3

First published (updated )

CVE-2015-6658

Drupal DrupalInput Validation

4.3

First published (updated )

CVE-2015-3234

Drupal DrupalOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to…

6.1

First published (updated )

CVE-2015-2749

Drupal Drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to hav…

6.8

First published (updated )

CVE-2014-5267

Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …

5

First published (updated )

CVE-2014-5266

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …

5

First published (updated )

CVE-2014-5265

Drupal DrupalXSS

2.1

First published (updated )

CVE-2014-5021

Drupal DrupalInput Validation

5

First published (updated )

CVE-2014-5019

Drupal DrupalThe OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authen…

7.5

First published (updated )

CVE-2014-1475

Drupal DrupalXSS

2.6

First published (updated )

CVE-2013-0244

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalDrupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers,…

6.8

First published (updated )

CVE-2013-6386

Drupal DrupalCode Injection, CSRF

5.1

First published (updated )

CVE-2013-6385

Drupal DrupalInfoleak

6.8

First published (updated )

CVE-2012-0825

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2012-0826

Drupal DrupalThe printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x befo…

2.1

First published (updated )

CVE-2013-0245

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalInput Validation

6

First published (updated )

CVE-2012-5653

Drupal DrupalInfoleak

5

First published (updated )

CVE-2012-5652

Drupal DrupalDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow…

5

First published (updated )

CVE-2012-5651

Drupal DrupalInfoleak

5

First published (updated )

CVE-2012-2922

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2007-6752

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, vi…

5

First published (updated )

CVE-2010-3686

Drupal DrupalThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, vi…

5

First published (updated )

CVE-2010-3685

Drupal DrupalThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, vi…

5

First published (updated )

CVE-2010-3091

Drupal DrupalXSS

2.1

First published (updated )

CVE-2010-3094

Drupal DrupalThe upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insen…

5.5

First published (updated )

CVE-2010-3092

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users w…