https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:54:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05545 bdu:2020-05545 https://cve.radiocsirt.org/vuln/bdu:2020-05545 https://cve.radiocsirt.org/vuln/bit-drupal-2020-13671 <p><strong>Affected:</strong> Bitnami: drupal</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> <p><strong>Affected:</strong> Bitnami: drupal</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> https://cve.radiocsirt.org/vuln/bit-drupal-2020-13671 https://cve.radiocsirt.org/vuln/certfr-2020-avi-760 certfr-2020-avi-760 https://cve.radiocsirt.org/vuln/certfr-2020-avi-760 https://cve.radiocsirt.org/vuln/cnvd-2020-64563 cnvd-2020-64563 https://cve.radiocsirt.org/vuln/cnvd-2020-64563 https://cve.radiocsirt.org/vuln/euvd-2026-256049 EUVD-2026-256049 https://cve.radiocsirt.org/vuln/euvd-2026-256049 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13671 <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13671 https://cve.radiocsirt.org/vuln/ghsa-68jc-v27h-vhmw <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> https://cve.radiocsirt.org/vuln/ghsa-68jc-v27h-vhmw https://cve.radiocsirt.org/vuln/gsd-2020-13671 gsd-2020-13671 https://cve.radiocsirt.org/vuln/gsd-2020-13671 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13671 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13671 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1938 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1938