Browse CVEs

MEDIUM 6.5 CVE-2008-3742 Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execut… Drupal Mitigation only Fix from $1,6002008-08-27 MEDIUM 5.8 CVE-2008-3743 Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions vi… Drupal Mitigation only Fix from $1,6002008-08-27 MEDIUM 6.4 CVE-2008-0569 The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows… Comment Upload Module Mitigation only Fix from $1,6002008-02-05 MEDIUM 6.4 CVE-2008-0577 The Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier… Project Issue Tracking Module Mitigation only Fix from $1,6002008-02-05 MEDIUM 5.0 CVE-2008-0570 The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID p… Openid Mitigation only Fix from $1,6002008-02-05 HIGH 8.5 CVE-2008-0277 Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary cod… Fileshare Module No fix yet Fix from $1,9502008-01-15 HIGH 7.5 CVE-2006-5476 Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized … Drupal Mitigation only Fix from $1,9502006-10-24 HIGH 7.5 CVE-2005-1871 Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain pri… Drupal Mitigation only Fix from $1,9502005-06-09