Jakub Suchy

**Name of the Vulnerable Software and Affected Versions** Drupal Node Browser module (affected versions not specified) **Description** The issue involves multiple unspecified vulnerabilities in the Node Browser module for Drupal, with unknown impact and attack vectors. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Drupal (affected versions not specified) **Description** The issue concerns multiple unspecified vulnerabilities in the quota by role module for Drupal. The impact and attack vectors of these vulnerabilities are unknown. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: SpeedTech Organization and Resource Manager (Storm) versions 5.x before 5.x-1.14 SpeedTech Organization and Resource Manager (Storm) versions 6.x before 6.x-1.18 Description: The issue allows remote authenticated users with storm project access to execute arbitrary SQL commands. This can be achieved via unspecified vectors. Recommendations: For SpeedTech Organization and Resource Manager (Storm) versions 5.x before 5.x-1.14, update to version 5.x-1.14 or later. For SpeedTech Organization and Resource Manager (Storm) versions 6.x before 6.x-1.18, update to version 6.x-1.18 or later.

**Name of the Vulnerable Software and Affected Versions** Drupal Easylinks Module version 4.7 before 1.5.2.1 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. **Recommendations** For versions prior to 1.5.2.1, update to version 1.5.2.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Drupal Easylinks Module version 4.7 before 1.5.2.1 **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions prior to 1.5.2.1, update to version 1.5.2.1 or later to resolve the issue.