Vulnerability index

Browse CVEs

38 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Drupal MEDIUM 6.5
CVE-2008-3742

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execut…

Mitigation only
Fix from $1,600 2008-08-27
Drupal MEDIUM 5.8
CVE-2008-3743

Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions vi…

Mitigation only
Fix from $1,600 2008-08-27
Comment Upload Module MEDIUM 6.4
CVE-2008-0569

The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows…

Mitigation only
Fix from $1,600 2008-02-05
Project Issue Tracking Module MEDIUM 6.4
CVE-2008-0577

The Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier…

Mitigation only
Fix from $1,600 2008-02-05
Openid MEDIUM 5.0
CVE-2008-0570

The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID p…

Mitigation only
Fix from $1,600 2008-02-05
Fileshare Module HIGH 8.5
CVE-2008-0277

Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary cod…

No fix yet
Fix from $1,950 2008-01-15
Drupal HIGH 7.5
CVE-2006-5476

Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized …

Mitigation only
Fix from $1,950 2006-10-24
Drupal HIGH 7.5
CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain pri…

Mitigation only
Fix from $1,950 2005-06-09