https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:46:57 +0000 https://cve.radiocsirt.org/vuln/certfr-2014-ale-008 certfr-2014-ale-008 https://cve.radiocsirt.org/vuln/certfr-2014-ale-008 https://cve.radiocsirt.org/vuln/certfr-2014-avi-434 certfr-2014-avi-434 https://cve.radiocsirt.org/vuln/certfr-2014-avi-434 https://cve.radiocsirt.org/vuln/euvd-2026-99409 EUVD-2026-99409 https://cve.radiocsirt.org/vuln/euvd-2026-99409 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3704 <p>The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.</p> <p>The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3704 https://cve.radiocsirt.org/vuln/ghsa-f9cm-c972-9975 <p>The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.</p> <p>The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.</p> https://cve.radiocsirt.org/vuln/ghsa-f9cm-c972-9975 https://cve.radiocsirt.org/vuln/gsd-2014-3704 gsd-2014-3704 https://cve.radiocsirt.org/vuln/gsd-2014-3704 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3704 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: drupal7</p> <p>The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: drupal7</p> <p>The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3704