https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:46:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01219 bdu:2025-01219 https://cve.radiocsirt.org/vuln/bdu:2025-01219 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-039 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/seckit</p> <p>This module provides Drupal with various security-hardening options, for example by emitting various configurable HTTP response headers.</p> <p>The module doesn&#39;t sufficiently validate input in Content Security Policy (CSP) violation reports. This can cause errors when a logging module (e.g. dblog or syslog) attempts to parse the resulting log message which contains invalid data.</p> <p>This vulnerability is mitigated by the fact that to be affected a site must have seckit&#39;s CSP reporting functionality enabled. Recent versions of Drupal 10 and 11 core are not vulnerable due to [improved parsing of log messages](https://www.drupal.org/project/drupal/issues/2481349).</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/seckit</p> <p>This module provides Drupal with various security-hardening options, for example by emitting various configurable HTTP response headers.</p> <p>The module doesn&#39;t sufficiently validate input in Content Security Policy (CSP) violation reports. This can cause errors when a logging module (e.g. dblog or syslog) attempts to parse the resulting log message which contains invalid data.</p> <p>This vulnerability is mitigated by the fact that to be affected a site must have seckit&#39;s CSP reporting functionality enabled. Recent versions of Drupal 10 and 11 core are not vulnerable due to [improved parsing of log messages](https://www.drupal.org/project/drupal/issues/2481349).</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2024-039 https://cve.radiocsirt.org/vuln/euvd-2026-210467 EUVD-2026-210467 https://cve.radiocsirt.org/vuln/euvd-2026-210467 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13275 <p>Access of Resource Using Incompatible Type (&#39;Type Confusion&#39;) vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.</p> <p>Access of Resource Using Incompatible Type (&#39;Type Confusion&#39;) vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-13275 https://cve.radiocsirt.org/vuln/ghsa-jjvf-4cxj-rqv4 <p>Access of Resource Using Incompatible Type (&#39;Type Confusion&#39;) vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.</p> <p>Access of Resource Using Incompatible Type (&#39;Type Confusion&#39;) vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.</p> https://cve.radiocsirt.org/vuln/ghsa-jjvf-4cxj-rqv4 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2126 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2126