drupal7

3 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-26493

  miniOrange SAML Authentication Bypass

  Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability. An attacker with access to a HTTP-request intercepting method is able to bypass authentication and authorization b…

  Xecuify Drupal 9 miniOrange SAML SP Drupal 8 miniOrange SAML SP Drupal 7 miniOrange SAML SP Web / CMS Alpine
  Jun 3, 2022
• Critical 9.8
  CVE-2019-11831

  Directory Traversal in typo3/phar-stream-wrapper

  The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows attackers to bypass a deserialization protection mechanism, as demonstrated by a phar:///path/bad.phar/.…

  drupal/core drupal/drupal drupal7 drupal7 Ubuntu Alpine Packagist
  May 9, 2019
• Critical 9.8
  CVE-2018-7600 Exploited · Ransomware Public exploit EPSS 100%

  Drupal Core Remote Code Execution Vulnerability

  Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

  drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist
  Mar 29, 2018

  KEV Nov 3, 2021