https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:52:28.741567+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-ale-008 certfr-2014-ale-008 — Une vulnérabilité a été découverte dans <span class="textit">Drupal</span>. Elle permet à un attaquant de provoquer une… 2026-10-04T07:52:28.824922+00:00 certfr-2014-ale-008 https://cve.radiocsirt.org/vuln/certfr-2014-avi-434 certfr-2014-avi-434 — Une vulnérabilité a été corrigée dans <span class="textit">Drupal</span>. Elle permet à un attaquant de provoquer une i… 2026-10-04T07:52:28.824966+00:00 certfr-2014-avi-434 https://cve.radiocsirt.org/vuln/euvd-2026-99409 EUVD-2026-99409 2026-10-04T07:52:28.824983+00:00 EUVD-2026-99409 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3704 fkie_cve-2014-3704 2026-10-04T07:52:28.824996+00:00

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

 https://cve.radiocsirt.org/vuln/ghsa-f9cm-c972-9975 GHSA-f9cm-c972-9975 2026-10-04T07:52:28.825025+00:00

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

 https://cve.radiocsirt.org/vuln/gsd-2014-3704 gsd-2014-3704 2026-10-04T07:52:28.825041+00:00 gsd-2014-3704 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3704 UBUNTU-CVE-2014-3704 2026-10-04T07:52:28.825052+00:00

Affected: Ubuntu:14.04:LTS: drupal7

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.