Filter
AND
-Infinity
0

Open SocialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

First published (updated )

Drupal Git UtilitiesGit Utilities for Drupal - Critical - Unsupported - SA-CONTRIB-2024-074

First published (updated )

Drupal Login DisableLogin Disable - Critical - Access bypass - SA-CONTRIB-2024-073

First published (updated )

Drupal PrintPrint Anything - Critical - Unsupported - SA-CONTRIB-2024-066

First published (updated )

Drupal Node ExportNode export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DrupalPOST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060

First published (updated )

DrupalFacets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047

First published (updated )

Open SocialOpen Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

First published (updated )

Drupal Content Entity CloneContent Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035

First published (updated )

Drupal FreelinkingFreelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal Advanced VarnishAdvanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-033

First published (updated )

Drupal Opigno group managerOpigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032

First published (updated )

DrupalResponsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-030

First published (updated )

Opigno LMSOpigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

First published (updated )

Drupal CommerceCommerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Drupal Private ContentPrivate content - Moderately critical - Access bypass - SA-CONTRIB-2024-012

First published (updated )

DrupalDrupal core - Critical - Cross Site Scripting - SA-CORE-2024-005

First published (updated )

composer/drupal/corecore/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) …

First published (updated )

Drupal Responsive MenusResponsive Menus Configuration Setting responsive_menus.module responsive_menus_admin_form_submit cross site scripting

First published (updated )

composer/drupal/coreXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/coreDrupal core - Moderately critical - Access bypass - SA-CORE-2023-005

First published (updated )

composer/drupal/coreDrupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not c…

First published (updated )

composer/drupal/coreDrupal core - Moderately critical - Access Bypass - SA-CORE-2022-013

First published (updated )

drupal jQuery UI checkboxradio drupaljQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label

First published (updated )

Oracle Financial Services Analytical Applications InfrastructureCross-site Scripting in CKEditor4

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DrupalThe Quick Edit module does not properly check entity access in some circumstances. This could result…

First published (updated )

composer/drupal/coreThe QuickEdit module does not properly check access to fields in some circumstances, which can lead …

First published (updated )

DrupalCSRF

First published (updated )

Drupal Entity EmbedXSS, CSRF

First published (updated )

composer/drupal/coreXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203