Security advisories for Drupal core

Topic	Created	Last reply
SA-CORE-2009-009 - Drupal Core - Cross site scripting	1 week 1 day ago by Gábor Hojtsy	n/a
SA-CORE-2009-008 - Drupal core - Multiple vulnerabilities	14 weeks 1 day ago by Drupal Security Team	n/a
SA-CORE-2009-007 - Drupal core - Multiple vulnerabilities	25 weeks 1 day ago by Drupal Security Team	n/a
SA-CORE-2009-006 - Drupal core - Cross site scripting	32 weeks 1 day ago by Drupal Security Team	n/a
SA-CORE-2009-005 - Drupal core - Cross site scripting	34 weeks 1 day ago by Drupal Security Team	n/a
New pages and RSS feeds for security announcements	40 weeks 2 days ago by pwolanin	n/a
SA-CORE-2009-004 - Local file inclusion on Windows	43 weeks 1 day ago by Drupal Security Team	n/a
SA-CORE-2009-003 - Local file inclusion on Windows	43 weeks 2 days ago by Drupal Security Team	n/a
SA-CORE-2009-001 Drupal core - Multiple vulnerabilities	49 weeks 1 day ago by Gábor Hojtsy	n/a
SA-2008-073 - Drupal core - Multiple vulnerabilities	1 year 2 weeks ago by Gábor Hojtsy	n/a
SA-2008-067 - Drupal core - Multiple vulnerabilities	1 year 9 weeks ago by Gábor Hojtsy	n/a
SA-2008-060 - Drupal core - Multiple vulnerabilities	1 year 11 weeks ago by Gábor Hojtsy	n/a
SA-2008-047 - Drupal core - Multiple vulnerabilities	1 year 19 weeks ago by Heine	n/a
SA-2008-046 - Drupal core - Session fixation	1 year 22 weeks ago by Heine	n/a
SA-2008-044 - Drupal core - Multiple vulnerabilities	1 year 24 weeks ago by Heine	n/a
SA-2008-026 - Drupal core - Access bypass	1 year 37 weeks ago by Heine	n/a
SA-2008-018 - Drupal core - Cross site scripting	1 year 43 weeks ago by Gábor Hojtsy	n/a
SA-2008-007 - Drupal core - Cross site scripting (register_globals)	1 year 49 weeks ago by Heine	n/a
SA-2008-006 - Drupal core - Cross site scripting (UTF8)	1 year 49 weeks ago by Heine	n/a
SA-2008-005 - Drupal core - Cross site request forgery	1 year 49 weeks ago by Heine	n/a
SA-2007-031 - Drupal core - SQL Injection possible when certain contributed modules are enabled	2 years 2 weeks ago by Heine	n/a
SA-2007-030 - Drupal Core - API handling of unpublished comment.	2 years 9 weeks ago by Heine	n/a
SA-2007-029 - Drupal core - User deletion cross site request forgery	2 years 9 weeks ago by Heine	n/a
SA-2007-026 - Drupal Core - Cross site scripting via uploads	2 years 10 weeks ago by Heine	n/a
SA-2007-025 - Drupal core - Arbitrary code execution via installer.	2 years 10 weeks ago by Heine	n/a

Security advisories for Drupal core

User login

Contributor links

New forum topics