Filter
AND
AND
AND
Drupal DrupalThe file download facility doesn't sufficiently sanitize file paths in certain situations. This may …
6.5
First published (updated )
composer/drupal/drupalDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
6.1
First published (updated )
Oracle REST Data ServicesPotential XSS vulnerability in jQuery
6.9
First published (updated )
Oracle Banking Digital ExperiencePotential XSS vulnerability in jQuery
6.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004
5.4
First published (updated )
Debian Debian LinuxExternal link injection on 404 pages when linking to the current page.
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update modul…
6.1
First published (updated )
Drupal DrupalOpen redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.…
6.1
First published (updated )
composer/drupal/coreFiles uploaded by anonymous users into a private file system can be accessed by other anonymous users
6.5
First published (updated )
Drupal DrupalConfirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduc…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers …
5.8
First published (updated )
Drupal DrupalOpen redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to…
6.1
First published (updated )
Drupal DrupalDrupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted …
6.8
First published (updated )
Drupal DrupalThe password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) modul…
First published (updated )
Drupal Drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to hav…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.