Skip to content
OpenAdvisories

Archive

25 November 2016

Vulnerabilities first published on this day (UTC), newest first.

← October 2016 2016 / November /25 December 2016 →
  1. 11
  2. 21
  3. 322
  4. 421
  5. 5 
  6. 6 
  7. 72
  8. 835
  9. 9 
  10. 1075
  11. 119
  12. 122
  13. 13 
  14. 147
  15. 155
  16. 1613
  17. 175
  18. 186
  19. 1913
  20. 20 
  21. 21 
  22. 2210
  23. 236
  24. 2411
  25. 2578
  26. 26 
  27. 27 
  28. 2815
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2016-9451

    Drupal Open Redirect

    Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.

    drupal/core drupal7 Ubuntu Packagist
  • Medium 6.5
    CVE-2016-9452

    Drupal Denial of service via transliterate mechanism

    The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.

    drupal/core drupal/drupal Packagist
  • Medium 4.3
    CVE-2016-9449

    Drupal sensitive information disclosure

    The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

    drupal/core drupal/drupal drupal7 Ubuntu Packagist