Filter
AND
-Infinity
0

Drupal Advanced PWA with Push NotificationsAdvanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017

First published (updated )

SwiftMailerSwift Mailer - Moderately critical - Access bypass - SA-CONTRIB-2024-006

First published (updated )

Open SocialOpen Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005

First published (updated )

DrupalThe Media module does not properly check entity access in some circumstances. This may result in use…

First published (updated )

Drupal SAML SP 2.0 Single Sign-OnminiOrange SAML Authentication Bypass

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DrupalMalicious File Upload

First published (updated )

DrupalDrupal core - Moderately critical - Cross site scripting - SA-CORE-2022-002

First published (updated )

Drupal InternationalizationThe official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank passwor…

First published (updated )

composer/drupal/coreDrupal core - Less critical - Access bypass - SA-CORE-2020-006

First published (updated )

composer/drupal/coreCommand Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DrupalSQL Injection

First published (updated )

Drupal ViewsThe Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize calls i…

First published (updated )

composer/drupal/coreDrupal core - Critical - Access bypass - SA-CORE-2019-008

First published (updated )

composer/drupal/corePath Traversal

First published (updated )

composer/symfony/dependency-injectionSQL Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/drupalPHAR stream wrapper Arbitrary PHP code execution

First published (updated )

composer/drupal/coreDrupal Core Remote Code Execution Vulnerability

First published (updated )

Storage APIInput Validation

First published (updated )

composer/drupal/coreDrupal Core Remote Code Execution Vulnerability

First published (updated )

composer/drupal/coreEntity access bypass for entities that do not have UUIDs or have protected revisions.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/coreCode Injection

First published (updated )

Banckle ChatThe admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows…

First published (updated )

DrupalMultiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unk…

First published (updated )

Roshan Shah Subdomain ManagerMultiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact …

First published (updated )

Kristy Frey Node Browser ModuleMultiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and a…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Node2nodeMultiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and atta…

First published (updated )

Andrew Sterling Hanenkamp Rest Api ModuleMultiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attac…

First published (updated )

Drupal TasklistSQL Injection

First published (updated )

DrupalInput Validation

First published (updated )

Drupal Aggregation ModuleCode Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203