drupal vulnerabilities (Mageia)

34 vulnerabilities.

• drupal Mageia Files uploaded by anonymous users into a private file system can be accessed by other anonymous users CVE-2017-6922 Fix available 6.5 MediumJune 24, 2017
• drupal Mageia Drupal Open Redirect CVE-2016-9451 Fix available 6.8 MediumNovember 17, 2016
• drupal Mageia Drupal sensitive information disclosure CVE-2016-9449 Fix available 4.3 MediumNovember 17, 2016
• drupal Mageia Updated drupal packages fix security vulnerabilities MGASA-2016-0245 Fix available No scoreJuly 8, 2016
• drupal Mageia Updated drupal packages fix security vulnerabilities MGASA-2016-0087 Fix available No scoreMarch 2, 2016
• drupal Mageia Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update... CVE-2015-7943 Fix available 6.1 MediumNovember 4, 2015
• drupal Mageia Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the... CVE-2015-6665 4.3 MediumAugust 24, 2015
• drupal Mageia Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node... CVE-2015-6661 5.0 MediumAugust 24, 2015
• drupal Mageia The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form... CVE-2015-6660 6.8 MediumAugust 24, 2015
• drupal Mageia SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x... CVE-2015-6659 7.5 HighAugust 24, 2015
• drupal Mageia Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and... CVE-2015-6658 4.3 MediumAugust 24, 2015
• drupal Mageia The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log... CVE-2015-3234 4.3 MediumJune 18, 2015
• drupal Mageia Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote... CVE-2015-3233 5.8 MediumJune 18, 2015
• drupal Mageia Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote... CVE-2015-3232 5.8 MediumJune 18, 2015
• drupal Mageia The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role,... CVE-2015-3231 4.0 MediumJune 18, 2015
• drupal Mageia Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before... CVE-2015-2750 Fix available 6.1 MediumMarch 20, 2015
• drupal Mageia Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers... CVE-2015-2749 Fix available 6.1 MediumMarch 20, 2015
• drupal Mageia Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the... CVE-2015-2559 Fix available 3.5 LowMarch 20, 2015
• drupal Mageia The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass)... CVE-2014-9016 Public exploit EPSS 79.1% 5.0 MediumNovember 20, 2014
• drupal Mageia Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a... CVE-2014-9015 6.8 MediumNovember 20, 2014
• drupal Mageia The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does... CVE-2014-3704 Public exploitFix available EPSS 100.0% 7.5 HighOctober 15, 2014
• drupal Mageia Updated drupal packages fix security vulnerability MGASA-2014-0329 Fix available No scoreAugust 12, 2014
• drupal Mageia Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows... CVE-2014-5022 4.3 MediumJuly 20, 2014
• drupal Mageia Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7... CVE-2014-5021 2.1 LowJuly 20, 2014
• drupal Mageia The File module in Drupal 7.x before 7.29 does not properly check permissions to view files,... CVE-2014-5020 4.9 MediumJuly 20, 2014
• drupal Mageia The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to... CVE-2014-5019 5.0 MediumJuly 20, 2014
• drupal Mageia Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different... CVE-2014-2983 Fix available 5.0 MediumApril 23, 2014
• drupal Mageia The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal,... CVE-2014-1476 4.0 MediumJanuary 20, 2014
• drupal Mageia The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to... CVE-2014-1475 Fix available 7.5 HighJanuary 20, 2014
• drupal Mageia Drupal has open redirect vulnerability in the Overlay module CVE-2013-6389 Fix available 5.8 MediumNovember 26, 2013
• drupal Mageia Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows... CVE-2013-6388 4.3 MediumNovember 26, 2013
• drupal Mageia Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows... CVE-2013-6387 2.1 LowNovember 26, 2013
• drupal Mageia Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random... CVE-2013-6386 6.8 MediumNovember 26, 2013
• drupal Mageia The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third... CVE-2013-6385 5.1 MediumNovember 26, 2013