Hofmockel.org

• Advisory ID: DRUPAL-SA-CONTRIB-2010-078
• Project: Kaltura (third-party module)
• Versions: 5.x, 6.x
• Date: 2010-July-28
• Security risk: Less Critical
• Exploitable from: Remote
• Vulnerability: Information disclosure

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-077
• Project: Sage Pay Direct Payment Gateway for Ubercart (third-party module)
• Version: 5.x, 6.x
• Date: 2010-July-28
• Security risk: Less Critical
• Exploitable from: Remote
• Vulnerability: Information Disclosure

read more

• Advisory ID: SA-CONTRIB-2010-076
• Project: Dashboard (third-party module)
• Version: 6.x
• Date: 2010-July-28
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-075
• Project: Tagging (third-party module)
• Version: 6.x
• Date: 2010-July 21
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-074
• Projects: Drupad (third-party module)
• Version: 6.x
• Date: 2010-07-14
• Security risks: Critical
• Exploitable from: Remote
• Vulnerability: CSRF

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-073
• Projects: Multiple third party modules - Simple Gallery, OG Menu, Tell A Friend Node, JsMath For Displaying Mathematics With TeX
• Version: 5.x, 6.x
• Date: 2010-July-14
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Multiple (Cross Site Scripting, Email Header Injection)

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-0XX
• Project: Hierarchical Select (third-party module)
• Version: 5.x, 6.x
• Date: 2010-July-07
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-071
• Project: MultiSafepay Integration (third-party module)
• Version: 6.x
• Date: 2010-July-07
• Security risk: Critical
• Exploitable from: Remote
• Vulnerability: Cross Site Request Forgery

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-070
• Projects: Multiple third party modules - Easy Translator, Block Queue, Multiple Image Upload (Imagex)
• Version: 5.x, 6.x
• Date: 2010-06-23
• Security risks: Critical
• Exploitable from: Remote
• Vulnerability: Multiple (SQL Injection, CSRF, Access bypass)

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-069
• Project: Case Tracker (third-party module)
• Version: 5.x
• Date: 2010-June-23
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Multiple Vulnerabilities

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-068
• Project: Masquerade (third-party module)
• Version: 5.x, 6.x
• Date: 2010-June-23
• Security risk: Not critical
• Exploitable from: Remote
• Vulnerability: Cross Site Request Forgery

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-067
• Project: Views (third-party module)
• Version: 5.x, 6.x
• Date: 2010-June-16
• Security risk: Less critical
• Exploitable from: Remote
• Vulnerability: Multiple vulnerabilities

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-066
• Project: FileField (third-party module)
• Version: 5.x, 6.x
• Date: 2010-June-16
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-065
• Project: Content Construction Kit (CCK) (third-party module)
• Version: 5.x, 6.x
• Date: 2010-June-16
• Security risk: Less Critical
• Exploitable from: Remote
• Vulnerability: Access Bypass

read more

• Advisory ID: DRUPAL-SA-CONTRIB-2010-064
• Project: Ubercart MIGS Payment Gateway (third-party module)
• Versions: 6.x
• Date: 2010-Jun-16
• Security risk: Critical
• Exploitable from: Remote
• Vulnerability: Web Parameter Tampering

• Advisory ID: DRUPAL-SA-CONTRIB-2010-063
• Project: Studio theme pack (third-party theme)
• Version: 6.x
• Date: 2010-June-16
• Security risk: Critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

• Advisory ID: DRUPAL-SA-CONTRIB-2010-062
• Project: Ogone | Ubercart payment (third-party module)
• Version: 5.x, 6.x
• Date: 2010-June-16
• Security risk: Critical
• Exploitable from: Remote
• Vulnerability: Access Bypass

• Advisory ID: DRUPAL-SA-CONTRIB-2010-061
• Project: AddonChat (third-party module)
• Version: 6.x-1.x
• Date: 2010-May-26
• Security risk: Highly Critical
• Exploitable from: Remote
• Vulnerability: Multiple (Privilege Escalation, Cross-site scripting)

• Advisory ID: DRUPAL-SA-CONTRIB-2010-060
• Project: Scheduler (third-party module)
• Version: 5.x, 6.x
• Date: 2010-May-26
• Security risk: Moderately critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

• Advisory ID: DRUPAL-SA-CONTRIB-2010-059
• Project: Panels (third-party module)
• Versions: 6.x
• Date: 2010 May 19
• Security risk: Critical
• Exploitable from: Remote
• Vulnerability: Arbitrary PHP code execution