User login

Upcoming events

No upcoming events available

Add to iCalendar

Search

Navigation

Who's online

There are currently 0 users and 4946 guests online.

News aggregator

SA-2008-069 - CCK for 5.x and 6.x - XSS vulnerabilities

Security announcements - Wed, 2008-11-05 19:51

Advisory ID: DRUPAL-SA-2008-069
Project: Content Construction Kit (third-party module)
Versions: 5.x, 6.x
Date: 2008-November-5
Security risk: Minor
Exploitable from: Remote
Vulnerability: Cross site scripting

Categories: Drupal, Security

SA-2008-068 - Localization client and Localization server - Cross site request forgery

Security announcements - Wed, 2008-10-22 21:34

Advisory ID: DRUPAL-SA-2008-068
Project: Localization client and Localization server (third-party modules)
Versions: 5.x, 6.x
Date: 2008-October-22
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site request forgery

Categories: Drupal, Security

SA-2008-067 - Drupal core - Multiple vulnerabilities

Security announcements - Wed, 2008-10-22 20:06

Advisory ID: DRUPAL-SA-2008-067
Project: Drupal core
Versions: 5.x and 6.x
Date: 2008-October-22
Security risk: Less Critical
Exploitable from: Local/Remote
Vulnerability: Multiple vulnerabilities

Categories: Drupal, Security

SA-2008-066 - Shindig-Integrator - Multiple vulnerabilities

Security announcements - Wed, 2008-10-15 20:02

Advisory ID: DRUPAL-SA-2008-066
Project: Shindig-Integrator (third-party module)
Versions: 5.x
Date: 2008-October-15
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Categories: Drupal, Security

SA-2008-065 - Node Clone - Access bypass

Security announcements - Wed, 2008-10-15 19:27

Advisory ID: DRUPAL-SA-2008-065
Project: Node Clone (third-party module)
Version: 6.x, and 5.x.
Date: 2008-October-15
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

Categories: Drupal, Security

SA-2008-064 - Node Vote - SQL injection vulnerability

Security announcements - Wed, 2008-10-15 17:46

Advisory ID: DRUPAL-SA-2008-064
Project: Node Vote (third-party module)
Versions: 5.x and 6.x
Date: 2008-October-15
Security risk: Critical
Exploitable from: Remote
Vulnerability: SQL injection

Categories: Drupal, Security

SA-2008-063 - multiple third party modules - Access bypass due to incorrect Drupal 6 updates

Security announcements - Thu, 2008-10-09 20:41

Advisory ID: DRUPAL-SA-2008-063
Project: Several Third-Party Modules incorrectly updated for the Drupal 6 menu system
Version: 6.x
Date: 2008-October-8
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

Categories: Drupal, Security

SA-2008-063 - multiple third party modules - Access bypass due to incorrect Drupal 6 updates

Security announcements - Thu, 2008-10-09 15:49

Advisory ID: DRUPAL-SA-2008-063
Project: Several Third-Party Modules incorrectly updated for the Drupal 6 menu system
Version: 6.x
Date: 2008-October-8
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

Categories: Drupal, Security

SA-2008-062 - SIOC - access bypass

Security announcements - Wed, 2008-10-08 22:47

Advisory ID: DRUPAL-SA-2008-062
Project: SIOC (third-party module)
Versions: 5.x and 6.x
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

Categories: Drupal, Security

SA-2008-061 - Everyblog - Multiple vulnerabilities

Security announcements - Wed, 2008-10-08 22:45

Advisory ID: DRUPAL-SA-2008-061
Project: EveryBlog (third-party module)
Versions: 5.x and 6.x
Date: 2008-October-08
Security risk: Highly critical
Exploitable from: Remote
Vulnerability:SQL injection, Cross-site scripting (XSS), Privilege escalation, access bypass

Categories: Drupal, Security

SA-2008-060 - Drupal core - Multiple vulnerabilities

Security announcements - Wed, 2008-10-08 22:43

Advisory ID: DRUPAL-SA-2008-060
Project: Drupal core
Versions: 5.x and 6.x
Date: 2008-October-8
Security risk: Critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Categories: Drupal, Security

SA-2008-063 - multiple third party modules - Access bypass due to incorrect Drupal 6 updates

Security announcements - Wed, 2008-10-08 22:28

Advisory ID: DRUPAL-SA-2008-063
Project: Several Third-Party Modules incorrectly updated for the Drupal 6 menu system
Version: 6.x
Date: 2008-October-8
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Access bypass

Categories: Drupal, Security

SA-2008-059 - Brilliant Gallery - SQL Injection and Cross Site Scripting

Security announcements - Wed, 2008-10-01 21:24

Advisory ID: DRUPAL-SA-2008-059
Project: Brilliant Gallery (third-party module)
Versions: 5.x
Date: 2008-October-1
Security risk: Critical
Exploitable from: Remote
Vulnerability: SQL injection and Cross Site Scripting

Categories: Drupal, Security

SA-2008-058 - Brilliant Gallery - SQL Injection

Security announcements - Wed, 2008-09-24 23:42

Advisory ID: DRUPAL-SA-2008-058
Project: Brilliant Gallery (third-party module)
Versions: 5.x, 6.x
Date: 2008-September-25
Security risk: Critical
Exploitable from: Remote
Vulnerability: SQL injection

Categories: Drupal, Security

SA-2008-057 - Ajax Checklist - Multiple vulnerabilities

Security announcements - Wed, 2008-09-24 20:48

Advisory ID: DRUPAL-SA-2008-057
Project: Ajax Checklist (third-party module)
Versions: 5.x
Date: 2008-September-24
Security risk: Critical
Exploitable from: Remote
Vulnerability: SQL injection, Cross site scripting

Categories: Drupal, Security

SA-2008-056 - Simplenews - Cross site scripting

Security announcements - Wed, 2008-09-24 19:58

Advisory ID: DRUPAL-SA-2008-056
Project: Simplenews (third-party module)
Versions: 5.x, 6.x
Date: 2008-September-24
Security risk: Not Critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Categories: Drupal, Security

SA-2008-055 - Stock - Cross site scripting

Security announcements - Wed, 2008-09-24 19:13

Advisory ID: DRUPAL-SA-2008-055
Project: Stock (third-party module)
Versions: 6.x
Date: 2008-September-24
Security risk: Moderately Critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Categories: Drupal, Security

SA-2008-054 - Plugin Manager - Access bypass

Security announcements - Wed, 2008-09-24 17:54

Advisory ID: DRUPAL-SA-2008-054
Project: Plugin Manager (third-party module)
Versions: 6.x
Date: 2008-September-24
Security risk: Critical
Exploitable from: Remote
Vulnerability: Access bypass

Categories: Drupal, Security

SA-2008-053 - Answers - Cross site scripting

Security announcements - Thu, 2008-09-18 14:31

Advisory ID: DRUPAL-SA-2008-053
Project: Answers (third-party module)
Versions: 5.x
Date: 2008-September-18
Security risk: Critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Categories: Drupal, Security

SA-2008-052 - Link To Us - Cross site scripting

Security announcements - Wed, 2008-09-17 20:13

Advisory ID: DRUPAL-SA-2008-052
Project: Link To Us (third-party module)
Versions: 5.x
Date: 2008-September-17
Security risk: Critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Categories: Drupal, Security