drupal7 vulnerabilities (Debian)
70 vulnerabilities.
-
drupal7Debian Drupal core Denial of Service vulnerability 7.5 High -
drupal7Debian XSS in `*Text` options of the Datepicker widget 6.5 Medium -
drupal7Debian XSS in the `altField` option of the Datepicker widget 6.5 Medium -
drupal7Debian Directory Traversal in Archive_Tar 7.1 High -
drupal7Debian Drupal core Cross-site Scripting (XSS) vulnerability 6.1 Medium -
drupal7Debian Directory Traversal in Archive_Tar 7.5 High -
drupal7Debian Deserialization of Untrusted Data in Archive_Tar 7.8 High -
drupal7Debian Multiple vulnerabilities through filename manipulation in Archive_Tar 7.8 High -
drupal7Debian Drupal core Unrestricted Upload of File with Dangerous Type 8.8 High -
drupal7Debian Drupal Core Cross-site scripting vulnerability 6.1 Medium -
drupal7Debian Drupal Core Cross-Site Request Forgery (CSRF) vulnerability 8.8 High -
drupal7Debian Drupal Core Open Redirect vulnerability 6.1 Medium -
drupal7Debian Potential XSS vulnerability in jQuery 6.9 Medium -
drupal7Debian jQuery has a potential XSS vulnerability 6.9 Medium -
drupal7Debian Directory Traversal in typo3/phar-stream-wrapper 9.8 Critical -
drupal7Debian XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
drupal7Debian Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004 5.4 Medium -
drupal7Debian PHAR stream wrapper Arbitrary PHP code execution 9.8 Critical -
drupal7Debian third-party PEAR Archive_Tar library updates 8.0 High -
drupal7Debian drupal7 - security update No score -
drupal7Debian drupal7 - security update No score -
drupal7Debian Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 9.8 Critical -
drupal7Debian Drupal Core Remote Code Execution Vulnerability 9.8 Critical -
drupal7Debian Drupal external link injection vulnerability 4.7 Medium -
drupal7Debian Drupal cross site scripting vulnerability 6.1 Medium -
drupal7Debian Drupal access bypass vulnerability 5.3 Medium -
drupal7Debian Drupal cross-site scripting vulnerability 6.1 Medium -
drupal7Debian Files uploaded by anonymous users into a private file system can be accessed by other anonymous users 6.5 Medium -
drupal7Debian jQuery-UI vulnerable to Cross-site Scripting in dialog closeText 6.1 Medium -
drupal7Debian Drupal Open Redirect 6.8 Medium -
drupal7Debian Drupal sensitive information disclosure 4.3 Medium -
drupal7Debian Drupal Saving user accounts can sometimes grant the user all roles 8.8 High -
drupal7Debian Drupal sensitive information disclosure 5.3 Medium -
drupal7Debian Drupal saving user accounts can sometimes grant the user all roles 8.1 High -
drupal7Debian Drupal Reflected file download vulnerability 6.4 Medium -
drupal7Debian Drupal Open Redirect 7.4 High -
drupal7Debian Drupal Brute force amplification attacks via XML-RPC 7.5 High -
drupal7Debian Drupal File upload access bypass and denial of service 8.1 High -
drupal7Debian Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update... 6.1 Medium -
drupal7Debian Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the... 4.3 Medium -
drupal7Debian Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node... 5.0 Medium -
drupal7Debian The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form... 6.8 Medium -
drupal7Debian SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x... 7.5 High -
drupal7Debian Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and... 4.3 Medium -
drupal7Debian The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log... 4.3 Medium -
drupal7Debian Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote... 5.8 Medium -
drupal7Debian Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote... 5.8 Medium -
drupal7Debian The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role,... 4.0 Medium -
drupal7Debian Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before... 6.1 Medium -
drupal7Debian Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers... 6.1 Medium - Show olderLoading…