Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
drupal drupal 6.15 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2009-4371
Cross-site scripting (XSS) vulnerability in the Locale module (modules/locale/locale.module) in Drupal Core 6.14, and possibly other versions including 6.15, allows remote authenticated users with "administer languages" permissions to inject arbitrary web script or HTML...
Drupal Drupal 6.14
Drupal Drupal 6.15
NA
CVE-2010-3094
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy term, related to the...
Drupal Drupal 6.0
Drupal Drupal 6.9
Drupal Drupal 6.10
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.13
Drupal Drupal 6.1
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 6.4
Drupal Drupal 6.6
Drupal Drupal 6.8
Drupal Drupal 6.15
Drupal Drupal 6.17
Drupal Drupal 6.5
Drupal Drupal 6.7
Drupal Drupal 6.14
Drupal Drupal 6.16
NA
CVE-2012-5652
Drupal 6.x prior to 6.27 allows remote malicious users to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.
Drupal Drupal 6.6
Drupal Drupal 6.25
Drupal Drupal 6.11
Drupal Drupal 6.13
Drupal Drupal 6.20
Drupal Drupal 6.19
Drupal Drupal 6.4
Drupal Drupal 6.12
Drupal Drupal 6.16
Drupal Drupal 6.0
Drupal Drupal 6.2
Drupal Drupal 6.26
Drupal Drupal 6.5
Drupal Drupal 6.24
Drupal Drupal 6.23
Drupal Drupal 6.18
Drupal Drupal 6.8
Drupal Drupal 6.7
Drupal Drupal 6.1
Drupal Drupal 6.22
Drupal Drupal 6.21
Drupal Drupal 6.15
NA
CVE-2012-0825
Drupal 6.x prior to 6.23 and 7.x prior to 7.11 does not verify that Attribute Exchange (AX) information is signed, which allows remote malicious users to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.
Drupal Drupal 7.9
Drupal Drupal 7.8
Drupal Drupal 7.7
Drupal Drupal 7.0
Drupal Drupal 6.0
Drupal Drupal 6.1
Drupal Drupal 6.16
Drupal Drupal 6.17
Drupal Drupal 7.4
Drupal Drupal 7.3
Drupal Drupal 6.12
Drupal Drupal 6.13
Drupal Drupal 6.2
Drupal Drupal 6.20
Drupal Drupal 7.6
Drupal Drupal 7.5
Drupal Drupal 6.10
Drupal Drupal 6.11
Drupal Drupal 6.18
Drupal Drupal 6.19
Drupal Drupal 7.x-dev
Drupal Drupal 7.10
NA
CVE-2012-0826
Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x prior to 6.23 and 7.x prior to 7.11 allows remote malicious users to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss...
Drupal Drupal 6.6
Drupal Drupal 6.7
Drupal Drupal 6.0
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.2
Drupal Drupal 6.20
Drupal Drupal 6.3
Drupal Drupal 6.16
Drupal Drupal 6.17
Drupal Drupal 6.8
Drupal Drupal 6.9
Drupal Drupal 6.13
Drupal Drupal 6.14
Drupal Drupal 6.15
Drupal Drupal 6.21
Drupal Drupal 6.22
Drupal Drupal 6.4
Drupal Drupal 6.5
Drupal Drupal 6.1
Drupal Drupal 6.10
Drupal Drupal 6.18
NA
CVE-2010-3686
The OpenID module in Drupal 6.x prior to 6.18, and the OpenID module 5.x prior to 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote malicious users to bypass authentication by leveraging an assertion from an OpenID pr...
Drupal Drupal 6.0
Drupal Drupal 6.1
Drupal Drupal 6.10
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.9
Drupal Drupal 6.13
Drupal Drupal 6.15
Drupal Drupal 6.6
Drupal Drupal 6.8
Drupal Drupal 6.17
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 6.4
Drupal Drupal 6.14
Drupal Drupal 6.16
Drupal Drupal 6.5
Drupal Drupal 6.7
Peter Wolanin Openid 5.x-1.0
Peter Wolanin Openid 5.x-1.1
Peter Wolanin Openid 5.x-1.2
Peter Wolanin Openid 5.x-1.x
NA
CVE-2010-3091
The OpenID module in Drupal 6.x prior to 6.18, and the OpenID module 5.x prior to 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote malicious users to bypass authentication by leveraging an assertion from an Open...
Drupal Drupal 6.0
Drupal Drupal 6.3
Drupal Drupal 6.4
Drupal Drupal 6.5
Drupal Drupal 6.6
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.13
Drupal Drupal 6.14
Drupal Drupal 6.1
Drupal Drupal 6.16
Drupal Drupal 6.2
Drupal Drupal 6.7
Drupal Drupal 6.9
Drupal Drupal 6.10
Drupal Drupal 6.15
Drupal Drupal 6.17
Drupal Drupal 6.8
Peter Wolanin Openid 5.x-1.1
Peter Wolanin Openid 5.x-1.2
Peter Wolanin Openid 5.x-1.3
Peter Wolanin Openid 5.x-1.x
NA
CVE-2010-3685
The OpenID module in Drupal 6.x prior to 6.18, and the OpenID module 5.x prior to 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote malicious users to bypass authentication by leveraging an assertio...
Drupal Drupal 6.1
Drupal Drupal 6.10
Drupal Drupal 6.11
Drupal Drupal 6.12
Drupal Drupal 6.0
Drupal Drupal 6.13
Drupal Drupal 6.15
Drupal Drupal 6.6
Drupal Drupal 6.8
Drupal Drupal 6.17
Drupal Drupal 6.2
Drupal Drupal 6.3
Drupal Drupal 6.4
Drupal Drupal 6.14
Drupal Drupal 6.16
Drupal Drupal 6.5
Drupal Drupal 6.7
Drupal Drupal 6.9
Peter Wolanin Openid 5.x-1.0
Peter Wolanin Openid 5.x-1.1
Peter Wolanin Openid 5.x-1.2
Peter Wolanin Openid 5.x-1.x
7.5
CVSSv3
CVE-2016-3165
The Form API in Drupal 6.x prior to 6.38 ignores access restrictions on submit buttons, which might allow remote malicious users to bypass intended access restrictions by leveraging permission to submit a form with a button that has "#access" set to FALSE in the server-...
Drupal Drupal 6.37
Drupal Drupal 6.9
Drupal Drupal 6.29
Drupal Drupal 6.28
Drupal Drupal 6.27
Drupal Drupal 6.26
Drupal Drupal 6.14
Drupal Drupal 6.13
Drupal Drupal 6.12
Drupal Drupal 6.11
Drupal Drupal 6.4
Drupal Drupal 6.7
Drupal Drupal 6.5
Drupal Drupal 6.33
Drupal Drupal 6.31
Drupal Drupal 6.3
Drupal Drupal 6.25
Drupal Drupal 6.23
Drupal Drupal 6.17
Drupal Drupal 6.15
Drupal Drupal 6.10
Drupal Drupal 6.0
NA
CVE-2010-3093
The comment module in Drupal 5.x prior to 5.23 and 6.x prior to 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.
Drupal Drupal 5.4
Drupal Drupal 5.5
Drupal Drupal 5.6
Drupal Drupal 5.7
Drupal Drupal 5.20
Drupal Drupal 5.21
Drupal Drupal 5.22
Drupal Drupal 5.0
Drupal Drupal 5.12
Drupal Drupal 5.13
Drupal Drupal 5.14
Drupal Drupal 5.15
Drupal Drupal 5.1
Drupal Drupal 5.3
Drupal Drupal 5.8
Drupal Drupal 5.10
Drupal Drupal 5.17
Drupal Drupal 5.19
Drupal Drupal 5.2
Drupal Drupal 5.9
Drupal Drupal 5.11
Drupal Drupal 5.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »