Filter
AND
AND
-Infinity
0
Trending
Oracle REST Data ServicesJQuery Cross-Site Scripting (XSS) Vulnerability
First published (updated )
Oracle Banking Digital ExperiencePotential XSS vulnerability in jQuery
6.9
First published (updated )
composer/drupal/coreDrupal core - Moderately critical - Access bypass - SA-CORE-2023-005
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004
5.4
First published (updated )
Debian LinuxExternal link injection on 404 pages when linking to the current page.
5.8
First published (updated )
DrupalThe OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalThe Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly re…
4.3
First published (updated )
composer/drupal/coreFiles uploaded by anonymous users into a private file system can be accessed by other anonymous users
6.5
First published (updated )
DrupalThe File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which a…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow…
First published (updated )
DrupalDrupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-insta…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalDrupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contribute…
First published (updated )
DrupalDrupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers,…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalThe Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU…
First published (updated )
DrupalDrupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted …
6.8
First published (updated )
DrupalThe password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) modul…
First published (updated )
Drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to hav…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.