Latest vulnerabilities for "drupal drupal" 6.4

6.1

First published (updated )

CVE-2015-2750

Drupal DrupalReflected file download vulnerability

8.5

First published (updated )

CVE-2016-3168

Drupal DrupalBrute force amplification attacks via XML-RPC

7.5

First published (updated )

CVE-2016-3163

Drupal DrupalCRLF Injection

5.9

First published (updated )

CVE-2016-3166

Drupal DrupalForm API ignores access restrictions on submit buttons

7.5

First published (updated )

CVE-2016-3165

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalOpen redirect via double-encoded 'destination' parameter

7.4

First published (updated )

CVE-2016-3167

Drupal DrupalOpen redirect via path manipulation

7.4

First published (updated )

CVE-2016-3164

Drupal DrupalCode Injection

8.1

First published (updated )

CVE-2016-3171

Drupal DrupalSaving user accounts can sometimes grant the user all roles

8.1

First published (updated )

CVE-2016-3169

Drupal DrupalInfoleak

5

First published (updated )

CVE-2015-6661

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2015-6660

Drupal DrupalXSS

4.3

First published (updated )

CVE-2015-6658

Drupal DrupalInput Validation

4.3

First published (updated )

CVE-2015-3234

Drupal DrupalOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to…

6.1

First published (updated )

CVE-2015-2749

Drupal Drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to hav…

6.8

First published (updated )

CVE-2014-5267

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …

5

First published (updated )

CVE-2014-5266

Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …

5

First published (updated )

CVE-2014-5265

Drupal DrupalXSS

2.1

First published (updated )

CVE-2014-5021

Drupal DrupalInput Validation

5

First published (updated )

CVE-2014-5019

Drupal DrupalXSS

2.6

First published (updated )

CVE-2013-0244

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalDrupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers,…

6.8

First published (updated )

CVE-2013-6386

Drupal DrupalCode Injection, CSRF

5.1

First published (updated )

CVE-2013-6385

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2012-0826

Drupal DrupalThe printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x befo…

2.1

First published (updated )

CVE-2013-0245

Drupal DrupalInput Validation

6

First published (updated )

CVE-2012-5653

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalInfoleak

5

First published (updated )

CVE-2012-5652

Drupal DrupalDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow…

5

First published (updated )

CVE-2012-5651

Drupal DrupalInfoleak

5

First published (updated )

CVE-2012-2922

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2007-6752

Drupal DrupalThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, vi…

5

First published (updated )

CVE-2010-3686

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, vi…

5

First published (updated )

CVE-2010-3685

Drupal DrupalThe OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, vi…

5

First published (updated )

CVE-2010-3091

Drupal DrupalXSS

2.1

First published (updated )

CVE-2010-3094

Drupal DrupalThe upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insen…

5.5

First published (updated )

CVE-2010-3092

Drupal DrupalThe comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users w…

3.5

First published (updated )

CVE-2010-3093

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalXSS

3.5

First published (updated )

CVE-2009-4369

Drupal DrupalXSS

3.5

First published (updated )

CVE-2009-4370

Drupal DrupalXSS

4.3

First published (updated )

CVE-2009-2373

Drupal DrupalXSS

3.5

First published (updated )

CVE-2009-1844

Drupal DrupalCSRF

4.3

First published (updated )

CVE-2009-1576

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalXSS

4.3

First published (updated )

CVE-2009-1575

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2008-6532

Drupal DrupalXSS

4.3

First published (updated )

CVE-2008-6533

Drupal DrupalInput Validation

critical

9.3

First published (updated )

CVE-2008-6171

Drupal DrupalXSS

3.5

First published (updated )

CVE-2008-6170

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authen…

6

First published (updated )

CVE-2008-4789

Drupal DrupalDrupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https sessi…