Filter
AND
AND
Drupal DrupalSaving user accounts can sometimes grant the user all roles
8.8
First published (updated )
Drupal DrupalFile upload access bypass and denial of service
8.1
First published (updated )
Drupal DrupalSaving user accounts can sometimes grant the user all roles
8.1
First published (updated )
Drupal DrupalBrute force amplification attacks via XML-RPC
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalThe OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authen…
7.5
First published (updated )
Drupal DrupalDrupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers,…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal Drupalmodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to hav…
6.8
First published (updated )
Drupal DrupalConfirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduc…
6.8
First published (updated )
Drupal DrupalOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update modul…
6.1
First published (updated )
Drupal DrupalOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalOpen redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.…
6.1
First published (updated )
Drupal DrupalOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers …
5.8
First published (updated )
Drupal DrupalOpen redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow…
First published (updated )
Drupal DrupalThe Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
Drupal DrupalThe File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which a…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.