Filter
-Infinity
0

Banckle ChatThe admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows…

First published (updated )

DrupalMultiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attac…

First published (updated )

Node2nodeMultiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and atta…

First published (updated )

DrupalMultiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unk…

First published (updated )

Andrew Sterling Hanenkamp Rest Api ModuleMultiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attac…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Roshan Shah Subdomain ManagerMultiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact …

First published (updated )

Kristy Frey Node Browser ModuleMultiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and a…

First published (updated )

composer/drupal/coreDrupal Core Remote Code Execution Vulnerability

First published (updated )

composer/drupal/coreDrupal Core Remote Code Execution Vulnerability

First published (updated )

composer/symfony/dependency-injectionSQL Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/corePath Traversal

First published (updated )

composer/drupal/drupalPHAR stream wrapper Arbitrary PHP code execution

First published (updated )

composer/drupal/coreEntity access bypass for entities that do not have UUIDs or have protected revisions.

First published (updated )

composer/drupal/coreDrupal core - Critical - Access bypass - SA-CORE-2019-008

First published (updated )

composer/drupal/coreDrupal core - Less critical - Access bypass - SA-CORE-2020-006

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/coreCode Injection

First published (updated )

DrupalSQL Injection

First published (updated )

DrupalMalicious File Upload

First published (updated )

composer/drupal/coreCommand Injection

First published (updated )

DrupalInput Validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DrupalDrupal core - Moderately critical - Cross site scripting - SA-CORE-2022-002

First published (updated )

DrupalThe Media module does not properly check entity access in some circumstances. This may result in use…

First published (updated )

DrupalDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014

8.8
First published (updated )

composer/drupal/coreCSRF

8.8
First published (updated )

DrupalSaving user accounts can sometimes grant the user all roles

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/coreDrupal core Un-restricted Upload of File

First published (updated )

DrupalReflected file download vulnerability

8.5
First published (updated )

DrupalUnrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 200701…

8.5
First published (updated )

Oracle Banking APIsAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

8.2
First published (updated )

Oracle Banking APIsHTML comments vulnerability allowing to execute JavaScript code

8.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203