Количество 1 966
Количество 1 966
CVE-2015-6661
Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu.
CVE-2015-6661
Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to ...
CVE-2015-6660
The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user's account via vectors related to "file upload value callbacks."
CVE-2015-6660
The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user's account via vectors related to "file upload value callbacks."
CVE-2015-6660
The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not pr ...
CVE-2015-6659
SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.
CVE-2015-6659
SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.
CVE-2015-6659
SQL injection vulnerability in the SQL comment filtering system in the ...
CVE-2015-6658
Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files.
CVE-2015-6658
Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files.
CVE-2015-6658
Cross-site scripting (XSS) vulnerability in the Autocomplete system in ...
CVE-2015-3234
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.
CVE-2015-3234
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.
CVE-2015-3234
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows ...
CVE-2015-3233
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2015-3233
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2015-3233
Open redirect vulnerability in the Overlay module in Drupal 7.x before ...
CVE-2015-3232
Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter.
CVE-2015-3232
Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter.
CVE-2015-3232
Open redirect vulnerability in the Field UI module in Drupal 7.x befor ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-6661 Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu. | CVSS2: 5 | 1% Низкий | почти 10 лет назад |
| CVE-2015-6661 Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to ... | CVSS2: 5 | 1% Низкий | почти 10 лет назад |
 | CVE-2015-6660 The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user's account via vectors related to "file upload value callbacks." | CVSS2: 6.8 | 0% Низкий | почти 10 лет назад |
| CVE-2015-6660 The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user's account via vectors related to "file upload value callbacks." | CVSS2: 6.8 | 0% Низкий | почти 10 лет назад |
| CVE-2015-6660 The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not pr ... | CVSS2: 6.8 | 0% Низкий | почти 10 лет назад |
| CVE-2015-6659 SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment. | CVSS2: 7.5 | 14% Средний | почти 10 лет назад |
| CVE-2015-6659 SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment. | CVSS2: 7.5 | 14% Средний | почти 10 лет назад |
| CVE-2015-6659 SQL injection vulnerability in the SQL comment filtering system in the ... | CVSS2: 7.5 | 14% Средний | почти 10 лет назад |
| CVE-2015-6658 Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files. | CVSS2: 4.3 | 1% Низкий | почти 10 лет назад |
| CVE-2015-6658 Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files. | CVSS2: 4.3 | 1% Низкий | почти 10 лет назад |
| CVE-2015-6658 Cross-site scripting (XSS) vulnerability in the Autocomplete system in ... | CVSS2: 4.3 | 1% Низкий | почти 10 лет назад |
| CVE-2015-3234 The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers. | CVSS2: 4.3 | 0% Низкий | около 10 лет назад |
| CVE-2015-3234 The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers. | CVSS2: 4.3 | 0% Низкий | около 10 лет назад |
| CVE-2015-3234 The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows ... | CVSS2: 4.3 | 0% Низкий | около 10 лет назад |
| CVE-2015-3233 Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. | CVSS2: 5.8 | 5% Низкий | около 10 лет назад |
| CVE-2015-3233 Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. | CVSS2: 5.8 | 5% Низкий | около 10 лет назад |
| CVE-2015-3233 Open redirect vulnerability in the Overlay module in Drupal 7.x before ... | CVSS2: 5.8 | 5% Низкий | около 10 лет назад |
| CVE-2015-3232 Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter. | CVSS2: 5.8 | 0% Низкий | около 10 лет назад |
| CVE-2015-3232 Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter. | CVSS2: 5.8 | 0% Низкий | около 10 лет назад |
| CVE-2015-3232 Open redirect vulnerability in the Field UI module in Drupal 7.x befor ... | CVSS2: 5.8 | 0% Низкий | около 10 лет назад |
Уязвимостей на страницу