Secutiry

Advisory ID: DRUPAL-SA-CONTRIB-2010-083
Project: UC2Checkout, UCPaypal, UC Cart LInks (third-party modules in the Ubercart Project)
Version: 5.x, 6.x
Date: 2010-Aug-11
Security risk: Critical
Exploitable from: Remote
Vulnerability: Access Bypass, Cross Site Request Forgery

Categories: Secutiry

SA-CONTRIB-2010-082 - Print - Local file read access

Contrib Drupal security advisory - Wed, 08/11/2010 - 11:35

Advisory ID: DRUPAL-SA-CONTRIB-2010-082
Project: Printer, e-mail and PDF versions (third-party module)
Version: 5.x, 6.x
Date: 2010-August-11
Security risk: Critical
Exploitable from: Remote
Vulnerability: Local file read access

Categories: Secutiry

SA-CONTRIB-2010-081 - FileField Sources - Arbitrary Code Execution

Contrib Drupal security advisory - Wed, 08/11/2010 - 11:31

Advisory ID: DRUPAL-SA-CONTRIB-2010-081
Project: FileField Sources (third-party module)
Version: 6.x
Date: 2010-May-19
Security risk: Critical
Exploitable from: Remote
Vulnerability: Arbitrary Code Execution

Categories: Secutiry

SA-CONTRIB-2010-080 - Privatemsg - Cross Site Scripting

Contrib Drupal security advisory - Wed, 08/11/2010 - 06:07

Advisory ID: DRUPAL-SA-CONTRIB-2010-080
Project: Privatemsg (third-party module)
Version: 6.x
Date: 2010-August-11
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross-Site Scripting

Categories: Secutiry

SA-CONTRIB-2010-079 - Devel (Performance logging) - Cross Site Scripting

Contrib Drupal security advisory - Wed, 08/04/2010 - 15:39

Advisory ID: SA-CONTRIB-2010-079
Project: Devel (third-party module)
Version: 5.x, 6.x
Date: 2010-Aug-04
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

Categories: Secutiry

Paranoid Penguin - Linux VPNs with OpenVPN, Part V

Linux Security from the Linux Journal - Sun, 08/01/2010 - 00:00

Tips for success in using OpenVPN for secure remote access. more>>

Categories: Secutiry

SA-CONTRIB-2010-078 - Kaltura - Information disclosure

Contrib Drupal security advisory - Wed, 07/28/2010 - 15:38

Advisory ID: DRUPAL-SA-CONTRIB-2010-078
Project: Kaltura (third-party module)
Versions: 5.x, 6.x
Date: 2010-July-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Information disclosure

Categories: Secutiry

SA-CONTRIB-2010-077 - Sage Pay (former Protx) Direct Payment Gateway for Ubercart - Information Disclosure

Contrib Drupal security advisory - Wed, 07/28/2010 - 10:25

Advisory ID: DRUPAL-SA-CONTRIB-2010-077
Project: Sage Pay Direct Payment Gateway for Ubercart (third-party module)
Version: 5.x, 6.x
Date: 2010-July-28
Security risk: Less Critical
Exploitable from: Remote
Vulnerability: Information Disclosure

Categories: Secutiry

SA-CONTRIB-2010-076 - Dashboard - Cross Site Scripting (CSS)

Contrib Drupal security advisory - Wed, 07/28/2010 - 09:11

Advisory ID: SA-CONTRIB-2010-076
Project: Dashboard (third-party module)
Version: 6.x
Date: 2010-July-28
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

Categories: Secutiry

Security vs. Convenience

Linux Security from the Linux Journal - Thu, 07/22/2010 - 07:00

Although my intent is not to start the next GNOME/KDE-level war, it seems there must be a happy medium between total desktop insecurity and total desktop unusability. Linux offers so many ways to secure data that it's important to realize it's okay for folks to have different needs and desires. Sure, there are some basic security measures we all should take—things like: more>>

Categories: Secutiry

SA-CONTRIB 2010-075 - Tagging - Cross Site Scripting

Contrib Drupal security advisory - Wed, 07/21/2010 - 11:03

Advisory ID: DRUPAL-SA-CONTRIB-2010-075
Project: Tagging (third-party module)
Version: 6.x
Date: 2010-July 21
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross Site Scripting

Categories: Secutiry

SA-CONTRIB-2010-074 - Drupad - Cross-site request forgery

Contrib Drupal security advisory - Wed, 07/14/2010 - 13:46

Advisory ID: DRUPAL-SA-CONTRIB-2010-074
Projects: Drupad (third-party module)
Version: 6.x
Date: 2010-07-14
Security risks: Critical
Exploitable from: Remote
Vulnerability: CSRF

Categories: Secutiry

Check this out!

Having problems maintaining your site index?
Each time you read a page you notice that some terms are missing for that page?
Or old terms that do not apply anymore are still being used there?

We have your solution: MO Auto add terms to automatically
add (and remove) terms from your Drupal website pages.