Drupal Vulnerabilities :

18.08.2008 : Drupal Security Update Fixes Multiple Security Bypass Vulnerabilities

26.06.2008 : Drupal Suggested Terms Module Cross Site Scripting Vulnerability

15.05.2008 : Drupal Site Documentation Module Privilege Escalation Vulnerability

25.04.2008 : Drupal E-Publish Module Cross Site Scripting and Request Forgery

25.04.2008 : Drupal Internationalization and Localizer Multiple Vulnerabilities

25.04.2008 : Drupal Ubercart Module Cross Site Scripting Vulnerability

10.04.2008 : Drupal Menu Security Bypass and Data Manipulation Vulnerability

10.04.2008 : Drupal Simple Access Module Security Bypass Vulnerability

03.04.2008 : Drupal Ubercart Module Orders Cross Site Scripting Vulnerabilities

03.04.2008 : Drupal Flickr Module Unspecified Cross Site Scripting Vulnerabilities

03.04.2008 : Drupal Webform Module Unspecified Cross Site Scripting Vulnerabilities

13.03.2008 : Ubercart for Drupal Attribute Module Cross site scripting Vulnerability

15.02.2008 : Drupal Header Image Unauthorized Administrative Access Issue

31.01.2008 : Drupal Secure Site Module HTTP Authentication Bypass Vulnerability

31.01.2008 : Drupal Project issue tracking Cross Site Scripting and File Upload

31.01.2008 : Drupal Userpoints Module Cross Site Request Forgery Vulnerability

31.01.2008 : Drupal Comment Upload Module Arbitrary File Upload Vulnerability

31.01.2008 : Drupal OpenID Module Spoofing and Identity Impersonation Vulnerability

25.01.2008 : Drupal Workflow Module Node Property Cross site scripting Vulnerability

25.01.2008 : Drupal Archive Module Unspecified Cross site scripting Vulnerability

14.01.2008 : Fedora Security Update Fixes Drupal Multiple Remote Vulnerabilities

14.01.2008 : vbDrupal Multiple Cross Site Scripting and Request Forgery Vulnerabilities

14.01.2008 : Meta tags Module for Drupal Image Handling Code Execution Vulnerability

14.01.2008 : BUEditor Module for Drupal Cross Site Request Forgery Vulnerability

14.01.2008 : Drupal Multiple Cross Site Scripting and Request Forgery Vulnerabilities

10.12.2007 : Fedora Security Update Fixes Drupal Multiple Module Vulnerabilities

25.10.2007 : Fedora Security Update Fixes Drupal Multiple Security Bypass Issues

19.10.2007 : Drupal Cross Site Scripting and Information Disclosure Vulnerabilities

14.08.2007 : Content Construction Kit for Drupal Nodereference Module Cross Site Scripting

31.07.2007 : Fedora Security Update Fixes Drupal Cross Site Request Forgery Vulnerability

30.07.2007 : Drupal Multiple Client-side Cross Site Scripting and Request Forgery Vulnerabilities

13.07.2007 : LoginToboggan Module for Drupal "username" Cross Site Scripting Vulnerability

10.07.2007 : Print Module for Drupal Security Bypass and Information Disclosure Vulnerability

10.07.2007 : Forward Module for Drupal Security Bypass and Information Disclosure Vulnerability

12.04.2007 : Database Administration for Drupal Cross Site Scripting and Request Forgery Issues

08.03.2007 : Project Issue Tracking for Drupal Unspecified Parameter Handling Node Disclosure Issue

07.03.2007 : Nodefamily Module for Drupal URL Arguments Handling Profile Manipulation Vulnerability

16.02.2007 : Secure Site Module for Drupal Unspecified String Handling Security Bypass Vulnerability

16.02.2007 : Image Pager Module for Drupal "IMG" Tag Handling Cross Site Scripting Vulnerability

16.02.2007 : getID3 Library for Drupal Demonstration Scripts Remote Code Execution Vulnerability

31.01.2007 : Captcha and Textimage Modules for Drupal Security Validation Bypass Vulnerability

30.01.2007 : vbDrupal Security Update Fixes Comment Preview Command Execution Vulnerability

30.01.2007 : Drupal "comment_form_add_preview()" Comment Preview Code Execution Vulnerability

24.01.2007 : Acidfree Module for Drupal Node Title Handling Remote SQL Injection Vulnerability

24.01.2007 : Project and Project Issue Tracking for Drupal Multiple Security Bypass Vulnerabilities

09.01.2007 : OpenPKG Security Update Fixes Drupal Cross Site Scripting and DoS Vulnerabilities

05.01.2007 : Drupal Database Update Page Cache Poisoning Remote Denial of Service Vulnerability

05.01.2007 : Drupal "Filter" and "System" Modules Multiple Arguments Cross Site Scripting Issues

18.12.2006 : MySite Module for Drupal Titles Handling Client-Side Cross Site Scripting Vulnerability

18.12.2006 : Project and Project Issue Tracking for Drupal Multiple Cross Site Scripting Vulnerabilities

11.12.2006 : Chatroom Module for Drupal Information Disclosure and Security Bypass Vulnerabilities

11.12.2006 : Help Tip for Drupal Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities

06.12.2006 : CVS management/tracker for Drupal "motivation" Field Cross Site Scripting Vulnerability

26.10.2006 : Extended Tracker for Drupal Unspecified Parameter SQL Injection Vulnerability

26.10.2006 : OpenPKG Security Update Fixes Drupal Multiple Cross Site Scripting Vulnerabilities

20.10.2006 : Drupal Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities

03.10.2006 : IMCE Module for Drupal Arbitrary File Deletion and Script Upload Vulnerabilities

20.09.2006 : Search Keywords Module for Drupal Client-Side Cross Site Scripting Vulnerability

20.09.2006 : Site Profile Directory Module for Drupal Client-Side Cross Site Scripting Vulnerability

14.09.2006 : Userreview Module for Drupal Unspecified Parameter Cross Site Scripting Vulnerability

08.09.2006 : Pubcookie Module for Drupal Login Redirection Mechanism Spoofing Vulnerability

06.09.2006 : Pathauto Module for Drupal Unspecified Parameter Cross Site Scripting Vulnerability

23.08.2006 : Easylinks for Drupal Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities

23.08.2006 : E-commerce for Drupal Multiple Parameter Handling Cross Site Scripting Vulnerabilities

10.08.2006 : Debian Security Update Fixes Drupal User Module Cross Site Scripting Vulnerability

09.08.2006 : Bibliography Module for Drupal Remote SQL Injection and Cross Site Scripting Vulnerabilities

08.08.2006 : Recipe Module for Drupal Unspecified Parameter Handling Cross Site Scripting Vulnerability

08.08.2006 : Drupal Jobsearch Module Unspecified Parameter Handling Remote SQL Injection Vulnerability

03.08.2006 : Drupal User Module "msg" Parameter Handling Client-Side Cross Site Scripting Vulnerability

26.07.2006 : Debian Security Update Fixes Drupal SQL Injection and Cross Site Scripting Vulnerabilities

12.07.2006 : Drupal "webform" Module Multiple Parameter Handling Cross Site Scripting Vulnerabilities

05.07.2006 : Form_mail Module for Drupal Unspecified Remote Mail Header Injection Vulnerability

02.06.2006 : Drupal Taxonomy Module "name" Parameter Cross Site Scripting Vulnerability

25.05.2006 : Drupal Remote SQL Injection and Arbitrary Script Execution Vulnerabilities

08.05.2006 : Drupal Project Module Issue Handling Cross Site Scripting Vulnerability

17.03.2006 : Debian Security Update Fixes Drupal Multiple Security Bypass Vulnerabilities

27.01.2006 : Debian Security Update Fixes Drupal Cross Site Scripting Vulnerabilities

01.12.2005 : Drupal Cross Site Scripting and Security Bypass Vulnerabilities

04.10.2005 : Debian Security Update Fixes Drupal XML-RPC Command Execution

15.08.2005 : Drupal XML-RPC for PHP Nested Tags Remote Code Execution

11.07.2005 : Debian Security Update Fixes Multiple Drupal Vulnerabilities

30.06.2005 : Drupal XML-RPC Library Remote Code Execution Vulnerability

Sort security advisories by Vendors