Security advisories for Drupal core

Topic	Replies	Created	Last reply
DRUPAL-SA-2005-008 XSS and HTTP header injection vulnerability with uploaded files	0	7 years 24 weeks ago by Dries	n/a
DRUPAL-SA-2005-007 XSS vulnerability in submitted content	0	7 years 24 weeks ago by Dries	n/a
DRUPAL-SA-2005-009 Bypass "view user profiles" permission	0	7 years 24 weeks ago by Dries	n/a
DRUPAL-SA-2006-001 Security bypass in menu.module	0	7 years 9 weeks ago by jvandyk	n/a
DRUPAL-SA-2006-002 XSS vulnerabilities	0	7 years 9 weeks ago by jvandyk	n/a
DRUPAL-SA-2006-003 Session fixation vulnerability	0	7 years 9 weeks ago by jvandyk	n/a
DRUPAL-SA-2006-004 Mail header injection vulnerability	0	7 years 9 weeks ago by jvandyk	n/a
DRUPAL-SA-2006-005 - Drupal core - SQL injection vulnerability	2	6 years 51 weeks ago by chx	6 years 51 weeks ago by Heine
SA-2006-006 - Drupal Core - Execution of arbitrary files in certain Apache configurations	3	6 years 51 weeks ago by webchick	6 years 51 weeks ago by Zhen-Xjell
SA-2006-007 - Drupal Core - Revision to DRUPAL-SA-2006-006	0	6 years 50 weeks ago by webchick	n/a
DRUPAL-SA-2006-008 XSS Vulnerability in taxonomy module	0	6 years 50 weeks ago by webchick	n/a
DRUPAL-SA-2006-011 XSS Vulnerability in user module	2	6 years 41 weeks ago by Gerhard Killesreiter	6 years 41 weeks ago by Gerhard Killesreiter
DRUPAL-SA-2006-024 - Drupal core - Multiple cross site scripting vulnerabilities	0	6 years 31 weeks ago by Heine	n/a
DRUPAL-SA-2006-025 - Drupal core - Cross site request forgeries	0	6 years 31 weeks ago by Heine	n/a
DRUPAL-SA-2006-026 - Drupal core - Form action attribute injection	0	6 years 31 weeks ago by Heine	n/a
Drupal core - Cross site scripting	0	6 years 21 weeks ago by Heine	n/a
Drupal core - Denial of service	0	6 years 21 weeks ago by Heine	n/a
DRUPAL-SA-2007-005 - Drupal core - Arbitrary code execution	0	6 years 15 weeks ago by Heine	n/a
Drupal core - Cross site request forgeries	0	5 years 42 weeks ago by Heine	n/a
Drupal core - Multiple cross site scripting vulnerabilities	0	5 years 42 weeks ago by Heine	n/a
SA-2007-024 - Drupal Core - HTTP response splitting	0	5 years 30 weeks ago by Heine	n/a
SA-2007-025 - Drupal core - Arbitrary code execution via installer.	0	5 years 30 weeks ago by Heine	n/a
SA-2007-026 - Drupal Core - Cross site scripting via uploads	0	5 years 30 weeks ago by Heine	n/a
SA-2007-029 - Drupal core - User deletion cross site request forgery	0	5 years 30 weeks ago by Heine	n/a
SA-2007-030 - Drupal Core - API handling of unpublished comment.	0	5 years 30 weeks ago by Heine	n/a

Subscribe with RSS

Security advisories for Drupal core

New forum topics