Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-3171
6.8
MEDIUMCVSS v2
Published
April 12, 2016
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 6.0, = 6.1, = 6.2, = 6.3, = 6.4, = 6.5, = 6.6, = 6.7, = 6.8, = 6.9, = 6.10, = 6.11, = 6.12, = 6.13, = 6.14, = 6.15, = 6.16, = 6.17, = 6.18, = 6.19, = 6.20, = 6.21, = 6.22, = 6.23, = 6.24, = 6.25, = 6.26, = 6.27, = 6.28, = 6.29, = 6.30, = 6.31, = 6.32, = 6.33, = 6.34, = 6.35, = 6.36, = 6.37NVD
php
NPMAllows you to run PHP code in Node.js in various ways.
NPMAllows you to run PHP code in Node.js in various ways.<= 5.4.44, = 5.5.0, = 5.5.1, = 5.5.2, = 5.5.10, = 5.5.11, = 5.5.12, = 5.5.13, = 5.5.14, = 5.5.18, = 5.5.19, = 5.5.20, = 5.5.21, = 5.5.22, = 5.5.23, = 5.5.24, = 5.5.25, = 5.5.26, = 5.5.27, = 5.5.28, = 5.6.0, = 5.6.1, = 5.6.2, = 5.6.3, = 5.6.4, = 5.6.5, = 5.6.6, = 5.6.7, = 5.6.8, = 5.6.9, = 5.6.10, = 5.6.11, = 5.6.12NVD
RubyGems