Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupalCross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc...CVE-2009-43693.5 Low
- drupal, paul beaney phplist +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList...CVE-2009-40666.8 Medium
- drupal, ron jerome bibliography +1 moreCross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x...CVE-2009-34794.3 Medium
- drupalMultiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have...CVE-2009-335210.0 High
- drupal, karen stevenson date +1 moreCross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x...CVE-2009-31562.1 Low
- drupalDrupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for...CVE-2009-23744.3 Medium
- drupalCross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows...CVE-2009-23734.3 Medium
- drupalDrupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated...CVE-2009-23726.5 Medium
- drupal taxonomy managerCross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager...CVE-2009-20793.5 Low
- drupal viewsCross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows...CVE-2009-20763.5 Low
- drupal nodequeueCross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2,...CVE-2009-20743.5 Low
- drupal services module for drupalUnspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based...CVE-2009-20356.4 Medium
- drupal quizCross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x...CVE-2009-19423.5 Low
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12...CVE-2009-1844Fix available3.5 Low
- drupal printCross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions)...CVE-2009-18232.6 Low
- drupalUnspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal...CVE-2009-15764.3 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used...CVE-2009-15754.3 Medium
- drupal nodeaccess userreferenceThe Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a...CVE-2009-15077.5 High
- drupal news pageSQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote...CVE-2009-15056.5 Medium
- drupal localization clientCross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and...CVE-2009-13444.3 Medium
- drupal printCross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions)...CVE-2009-13434.3 Medium
- drupal cck comment referenceCross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2,...CVE-2009-13424.3 Medium
- drupal feedapi mapperCross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for...CVE-2009-12494.3 Medium
- drupalDrupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input...CVE-2008-65334.3 Medium
- drupalMultiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x...CVE-2008-65326.8 Medium
- drupal content construction kitMultiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal...CVE-2009-10694.3 Medium
- drupal, drupal print +1 moreCross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and...CVE-2009-10474.3 Medium
- drupal printUnspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions"...CVE-2009-10375.0 Medium
- drupal plus1Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for...CVE-2009-10366.8 Medium
- drupal tasklistSQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x...CVE-2009-103410.0 High
- drupal taxonomy theme moduleCross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function ...CVE-2009-08183.5 Low
- drupal protected node moduleCross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x...CVE-2009-08173.5 Low
- drupal comment mailMultiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a...CVE-2008-63846.8 Medium
- drupal stormSQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x...CVE-2008-63836.0 Medium
- drupal user karma moduleMultiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x...CVE-2008-62766.5 Medium
- drupal user karma moduleCross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x...CVE-2008-62754.3 Medium
- drupal content construction kitCross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content...CVE-2008-62293.5 Low
- drupalincludes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is...CVE-2008-61719.3 High
- drupalCross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows...CVE-2008-61703.5 Low
- drupal localization client, localization server +1 moreCross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and...CVE-2008-61696.8 Medium
- drupal semantically interconnected online communitiesSemantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1,...CVE-2008-61605.0 Medium
- drupal link moduleCross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10...CVE-2009-06033.5 Low
- drupal everyblogEveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions...CVE-2008-61377.5 High
- drupal everyblogUnspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers...CVE-2008-61367.5 High
- drupal everyblogCross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows...CVE-2008-61354.3 Medium
- drupal everyblogSQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote...CVE-2008-61347.5 High
- drupal views bulk operationsCross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function...CVE-2009-05754.3 Medium
- drupal viewsSQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote...CVE-2008-60207.5 High
- drupal internationalizationUnspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module...CVE-2009-03824.3 Medium
- drupal ajax checklistCross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for...CVE-2008-59993.5 Low
- Show moreLoading…