news aggregator

August 13, 2008

23:27

SA-2008-047 - Drupal core - Multiple vulnerabilities

Advisory ID: DRUPAL-SA-2008-047
Project: Drupal core
Version: 5.x, 6.x
Date: 2008-August-13
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Source: Drupal Security Announcements

July 23, 2008

19:58

SA-2008-046 - Drupal core - Session fixation

Advisory ID: DRUPAL-SA-2008-046
Project: Drupal core
Version: 5.x
Date: 2008-July-23
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Session fixation

Source: Drupal Security Announcements

July 9, 2008

22:08

SA-2008-045 - OpenID - Multiple vulnerabilities

Advisory ID: DRUPAL-SA-2008-045
Project: OpenID (third-party module)
Version: 5.x
Date: 2008-July-9
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting, Cross site request forgeries

Source: Drupal Security Announcements

21:24

SA-2008-044 - Drupal core - Multiple vulnerabilities

Advisory ID: DRUPAL-SA-2008-044
Project: Drupal core
Version: 5x, 6.x
Date: 2008-July-9
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Source: Drupal Security Announcements

July 2, 2008

20:56

SA-2008-043 - Outline designer - Privilege escalation

Advisory ID: DRUPAL-SA-2008-043
Project: Outline designer (third-party module)
Version: 5.x
Date: 2008-July-2
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Privilege escalation

Source: Drupal Security Announcements

20:51

SA-2008-042 - Tinytax - Cross site scripting

Advisory ID: DRUPAL-SA-2008-042
Project: Tinytax taxonomy block (third-party module)
Version: 5.x
Date: 2008-July-2
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Source: Drupal Security Announcements

20:48

SA-2008-041 - Taxonomy autotagger - Multiple vulnerabilities

Advisory ID: DRUPAL-SA-2008-041
Project: Taxonomy autotagger (third-party module)
Version: 5.x
Date: 2008-July-2
Security risk: Critical
Exploitable from: Remote
Vulnerability: Cross site scripting and SQL injection

Source: Drupal Security Announcements

20:42

SA-2008-040 - Organic Groups - Cross site scripting and information disclosure

Advisory ID: DRUPAL-SA-2008-040
Project: Organic Groups (third-party module)
Versions: 5.x and 6.x
Date: 2008-July-02
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Cross site scripting and information disclosure

Source: Drupal Security Announcements

June 25, 2008

18:53

SA-2008-039 - Suggested terms - Cross site scripting

Advisory ID: SA-2008-039
Project: Suggested terms (third-party module)
Versions: 5.x
Date: 2008-June-25
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Source: Drupal Security Announcements

June 18, 2008

21:50

SA-2008-038 - Services - Arbitrary code execution

Advisory ID: DRUPAL-SA-2008-038
Project: Services (third-party module)
Versions: 5.x and 6.x
Date: 2008-June-18
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

Source: Drupal Security Announcements

21:07

SA-2008-037 - TrailScout - XSS and SQL injection

Advisory ID: DRUPAL-SA-2008-037
Project: TrailScout (third-party module)
Version: 5.x
Date: 2008-June-18
Security risk: Higly critical
Exploitable from: Remote
Vulnerability: Cross site scripting and SQL injection

Source: Drupal Security Announcements

15:15

SA-2008-036 - Profile search - SQL Injection

Advisory ID: SA-2008-036
Project: Profile Search (third-party module)
Versions: 5.x
Date: 2008-July-18
Security risk: Critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Source: Drupal Security Announcements

June 11, 2008

19:44

SA-2008-035 - Aggregation - Multiple vulnerabilities

Advisory ID: SA-2008-035
Project: Aggregation (third-party module)
Versions: 5.x
Date: 2008-June-11
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Source: Drupal Security Announcements

19:44

SA-2008-035 - Aggregation - Multiple vulnerabilities

Advisory ID: SA-2008-035
Project: Aggregation (third-party module)
Versions: 5.x
Date: 2008-June-11
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

Source: Drupal Security Announcements

19:24

SA-2008-034 - Node Hierarchy - Access bypass

Advisory ID: SA-2008-034
Project: Node Hierarchy (third-party module)
Versions: 5.x and 6.x
Date: 2008-June-11
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

Source: Drupal Security Announcements

19:24

SA-2008-034 - Node Hierarchy - Access bypass

Advisory ID: SA-2008-034
Project: Node Hierarchy (third-party module)
Versions: 5.x and 6.x
Date: 2008-June-11
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Access bypass

Source: Drupal Security Announcements

16:11

SA-2008-033 - Taxonomy Image - Cross site scripting

Advisory ID: SA-2008-033
Project: Taxonomy Image (third-party module)
Versions: 5.x and 6.x
Date: 2008-June-11
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Source: Drupal Security Announcements

16:11

SA-2008-033 - Taxonomy Image - Cross site scripting

Advisory ID: SA-2008-033
Project: Taxonomy Image (third-party module)
Versions: 5.x and 6.x
Date: 2008-June-11
Security risk: Less critical
Exploitable from: Remote
Vulnerability: Cross site scripting

Source: Drupal Security Announcements

13:16

SA-2008-032 - Magic Tabs - Arbitrary code execution

Advisory ID: SA-2008-032
Project: Magic Tabs (third-party module)
Versions: 5.x
Date: 2008-June-11
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

Source: Drupal Security Announcements

13:16

SA-2008-032 - Magic Tabs - Arbitrary code execution

Advisory ID: SA-2008-032
Project: Magic Tabs (third-party module)
Versions: 5.x
Date: 2008-June-11
Security risk: Highly critical
Exploitable from: Remote
Vulnerability: Arbitrary code execution

Source: Drupal Security Announcements