Filter
AND
AND
composer/drupal/coreDrupal Core Remote Code Execution Vulnerability
First published (updated )
composer/drupal/drupalPHAR stream wrapper Arbitrary PHP code execution
9.8
First published (updated )
Drupal DrupalSaving user accounts can sometimes grant the user all roles
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core Un-restricted Upload of File
First published (updated )
Drupal DrupalFile upload access bypass and denial of service
8.1
First published (updated )
Drupal DrupalSaving user accounts can sometimes grant the user all roles
8.1
First published (updated )
composer/drupal/drupalthird-party PEAR Archive_Tar library updates
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
First published (updated )
Oracle Application Testing SuiteXSS, Input Validation
7.5
First published (updated )
Drupal DrupalBrute force amplification attacks via XML-RPC
7.5
First published (updated )
composer/drupal/coreDrupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraPEAR Archive_Tar Improper Link Resolution Vulnerability
First published (updated )
Drupal DrupalThe OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authen…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalDrupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vector…
7.5
First published (updated )
Fedoraproject FedoraAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability …
7.5
First published (updated )
Oracle Primavera GatewayXSS in `*Text` options of the Datepicker widget
7.2
First published (updated )
Oracle Primavera UnifierXSS in the `of` option of the `.position()` util
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Primavera UnifierXSS in the `altField` option of the Datepicker widget
7.2
First published (updated )
Oracle REST Data ServicesPotential XSS vulnerability in jQuery
6.9
First published (updated )
Oracle Banking Digital ExperiencePotential XSS vulnerability in jQuery
6.9
First published (updated )
Drupal DrupalDrupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-insta…
6.8
First published (updated )
Restful Web Services Project Restful Web ServicesCSRF
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.