Latest vulnerabilities for "drupal drupal" 7.0-rc4

6.1

First published (updated )

CVE-2015-7943

Drupal DrupalOpen redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.…

6.1

First published (updated )

CVE-2015-2750

Drupal DrupalConfirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduc…

6.8

First published (updated )

CVE-2016-9451

Drupal DrupalInfoleak

4.3

First published (updated )

CVE-2016-9449

Drupal DrupalSaving user accounts can sometimes grant the user all roles

8.8

First published (updated )

CVE-2016-6211

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalInfoleak

5.3

First published (updated )

CVE-2016-6212

Drupal DrupalReflected file download vulnerability

8.5

First published (updated )

CVE-2016-3168

Drupal DrupalBrute force amplification attacks via XML-RPC

7.5

First published (updated )

CVE-2016-3163

Drupal DrupalFile upload access bypass and denial of service

8.1

First published (updated )

CVE-2016-3162

Drupal DrupalOpen redirect via path manipulation

7.4

First published (updated )

CVE-2016-3164

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalInfoleak

5.3

First published (updated )

CVE-2016-3170

Drupal DrupalSaving user accounts can sometimes grant the user all roles

8.1

First published (updated )

CVE-2016-3169

Drupal DrupalXSS

4.3

First published (updated )

CVE-2015-6665

Drupal DrupalSQL Injection

7.5

First published (updated )

CVE-2015-6659

Drupal DrupalInfoleak

5

First published (updated )

CVE-2015-6661

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2015-6660

Drupal DrupalXSS

4.3

First published (updated )

CVE-2015-6658

Drupal DrupalOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers …

5.8

First published (updated )

CVE-2015-3233

Drupal DrupalInfoleak

4

First published (updated )

CVE-2015-3231

Drupal DrupalInput Validation

4.3

First published (updated )

CVE-2015-3234

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalOpen redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers…

5.8

First published (updated )

CVE-2015-3232

Drupal DrupalOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to…

6.1

First published (updated )

CVE-2015-2749

Drupal Drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to hav…

6.8

First published (updated )

CVE-2014-5267

Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …

5

First published (updated )

CVE-2014-5266

Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …

5

First published (updated )

CVE-2014-5265

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalXSS

2.1

First published (updated )

CVE-2014-5021

Drupal DrupalInput Validation

5

First published (updated )

CVE-2014-5019

Drupal DrupalXSS

4.3

First published (updated )

CVE-2014-5022

Drupal DrupalThe File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which a…

4.9

First published (updated )

CVE-2014-5020

Drupal DrupalThe OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authen…

7.5

First published (updated )

CVE-2014-1475

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does…

4

First published (updated )

CVE-2014-1476

Drupal DrupalXSS

2.6

First published (updated )

CVE-2013-0244

Drupal DrupalXSS

4.3

First published (updated )

CVE-2013-6388

Drupal DrupalXSS

2.1

First published (updated )

CVE-2013-6387

Drupal DrupalDrupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers,…

6.8

First published (updated )

CVE-2013-6386

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalCode Injection, CSRF

5.1

First published (updated )

CVE-2013-6385

Drupal DrupalInput Validation

7.5

First published (updated )

CVE-2013-6389

Drupal DrupalInfoleak

6.8

First published (updated )

CVE-2012-0825

Drupal DrupalCSRF

6.8

First published (updated )

CVE-2012-0826

Drupal DrupalThe File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remot…

3.5

First published (updated )

CVE-2012-0827

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalThe printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x befo…

2.1

First published (updated )

CVE-2013-0245

Drupal DrupalThe Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly re…

4.3

First published (updated )

CVE-2013-0246

Drupal DrupalThe Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU…

5

First published (updated )

CVE-2013-0316

Drupal DrupalInput Validation

6

First published (updated )

CVE-2012-5653

Drupal DrupalDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow…

5

First published (updated )

CVE-2012-5651

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal DrupalDrupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-insta…

6.8

First published (updated )

CVE-2012-4553

Drupal DrupalThe OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via…

5

First published (updated )

CVE-2012-4554

Drupal DrupalThe image module in Drupal 7.x before 7.14 does not properly check permissions when caching derivati…

5

First published (updated )

CVE-2012-1591

Drupal DrupalThe forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished fo…

4

First published (updated )

CVE-2012-1590

Drupal DrupalAlgorithmic complexity vulnerability in the _filter_url function in the text filtering system (modul…

3.5

First published (updated )

CVE-2012-1588

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.