drupal7 vulnerabilities (Ubuntu)
79 vulnerabilities.
drupal7UbuntuDrupal Reflected file download vulnerability6.4 Mediumdrupal7UbuntuDrupal Open Redirect7.4 Highdrupal7UbuntuDrupal Brute force amplification attacks via XML-RPC7.5 Highdrupal7UbuntuDrupal File upload access bypass and denial of service8.1 Highdrupal7UbuntuOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update...6.1 Mediumdrupal7UbuntuCross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the...4.3 Mediumdrupal7UbuntuDrupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node...5.0 Mediumdrupal7UbuntuThe Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form...6.8 Mediumdrupal7UbuntuSQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x...7.5 Highdrupal7UbuntuCross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and...4.3 Mediumdrupal7UbuntuThe OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log...4.3 Mediumdrupal7UbuntuOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote...5.8 Mediumdrupal7UbuntuOpen redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote...5.8 Mediumdrupal7UbuntuThe Render cache system in Drupal 7.x before 7.38, when used to cache content by user role,...4.0 Mediumdrupal7UbuntuOpen redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before...6.1 Mediumdrupal7UbuntuOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers...6.1 Mediumdrupal7UbuntuDrupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the...3.5 Lowdrupal7UbuntuThe password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass)...5.0 Mediumdrupal7UbuntuDrupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a...6.8 Mediumdrupal7UbuntuThe expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does...7.5 Highdrupal7Ubuntumodules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to...6.8 Mediumdrupal7UbuntuThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 Mediumdrupal7UbuntuThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 Mediumdrupal7UbuntuCross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows...4.3 Mediumdrupal7UbuntuCross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7...2.1 Lowdrupal7UbuntuThe File module in Drupal 7.x before 7.29 does not properly check permissions to view files,...4.9 Mediumdrupal7UbuntuThe multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to...5.0 Mediumdrupal7UbuntuDrupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different...5.0 Mediumdrupal7Ubuntu** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows...6.8 Medium