CVE List

Id CVE No. Status Description Phase Votes Comments Actions
103200  CVE-2017-6380  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170228)  None (candidate not yet proposed)    View
103199  CVE-2017-6379  Candidate  Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID.  Assigned (20170228)  None (candidate not yet proposed)    View
103198  CVE-2017-6378  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170228)  None (candidate not yet proposed)    View
103197  CVE-2017-6377  Candidate  When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.  Assigned (20170228)  None (candidate not yet proposed)    View
103196  CVE-2017-6376  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170228)  None (candidate not yet proposed)    View

Page 304 of 20943, showing 5 records out of 104715 total, starting on record 1516, ending on 1520

Actions