Products: 1
Vulnerabilities: 3
Known Exploited: 0
0
Critical Level Threats
0
High Level Threats
3
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2022-50957
Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS
Last Modified: Jun 04, 2026
Published: May 10, 2026
CVE-2015-2087
Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors.
Last Modified: Apr 12, 2025
Published: Feb 26, 2015
CVE-2014-9155
Directory traversal vulnerability in the Avatar Uploader module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta6 for Drupal allows remote authenticated users to read arbitrary files via a .. (dot dot) in the path of a cropped picture in the uploader panel.
Last Modified: Apr 12, 2025
Published: Dec 01, 2014
Items Per Page
