Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal saml sp 2.0 single sign on, xecuify drupal 7 miniorange saml sp, drupal 8 miniorange saml sp +1 more +3 moreminiOrange SAML Authentication BypassCVE-2022-26493Fix available9.8 Critical
- guzzle, debian linux, drupal +2 moreCross-domain cookie leakage in GuzzleCVE-2022-29248Fix available8.0 High
- drupal core, drupal +1 moreAccess bypass in Drupal coreCVE-2022-25274Fix available5.4 Medium
- drupal core, drupal +1 moreDrupal core Denial of Service vulnerabilityCVE-2022-25273Fix available7.5 High
- guzzle psr7, guzzlephp psr-7, drupal +2 moreImproper Input Validation in guzzlehttp/psr7CVE-2022-24775Fix available7.5 High
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog pluginCVE-2022-24729Fix available6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreCross-site Scripting in CKEditor4CVE-2022-24728Fix available5.4 Medium
- drupal core, drupal +1 moreDrupal core Denial of Service vulnerabilityCVE-2022-25270Fix available6.5 Medium
- drupal core, drupal, fedoraproject fedora +2 moreDrupal core Denial of Service vulnerabilityCVE-2022-25271Fix available7.5 High
- drupal core, drupal +1 moreAccess bypass in Drupal Core 8/9CVE-2020-13668Fix available6.1 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreHTML comments vulnerability allowing to execute JavaScript codeCVE-2021-41165Fix available8.2 High
- ckeditor, ckeditor ckeditor4, drupal +8 more +10 moreAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTMLCVE-2021-41164Fix available8.2 High
- jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 moreXSS in the `of` option of the `.position()` utilCVE-2021-41184Public exploitFix availableEPSS 40.8%6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 moreXSS in `*Text` options of the Datepicker widgetCVE-2021-41183Fix available6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 moreXSS in the `altField` option of the Datepicker widgetCVE-2021-41182Public exploitFix availableEPSS 39.4%6.5 Medium
- drupal core, drupal +1 moreDrupal core access bypass vulnerabilityCVE-2020-13677Fix available7.5 High
- drupal core, drupal +1 moreIncorrect Authorization in Drupal coreCVE-2020-13676Fix available6.5 Medium
- drupal core, drupal +1 moreUnrestricted Upload of File with Dangerous Type in Drupal coreCVE-2020-13675Fix available9.8 Critical
- drupal core, drupal +1 moreCross-Site Request Forgery in Drupal coreCVE-2020-13674Fix available6.5 Medium
- drupal entity embedThe Entity Embed module provides a filter to allow embedding entities in content fields. In...CVE-2020-13673Fix available6.1 Medium
- ckeditor, debian linux, drupal +1 more +3 moreckeditor4 vulnerable to cross-site scriptingCVE-2021-33829Fix available6.1 Medium
- drupal core, drupal +1 moreDrupal core Cross-site Scripting (XSS) vulnerabilityCVE-2020-13672Fix available6.1 Medium
- cleantalk anti-spam, drupal anti-spam by cleantalk +1 moreAnti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL InjectionsCVE-2021-241317.2 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDirectory Traversal in Archive_TarCVE-2020-36193In KEVFix availableEPSS 70.6%7.5 High
- drupal docker imagesThe official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank...CVE-2020-35191Public exploit9.8 Critical
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDeserialization of Untrusted Data in Archive_TarCVE-2020-28948Public exploitFix availableEPSS 47.5%7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreMultiple vulnerabilities through filename manipulation in Archive_TarCVE-2020-28949In KEVPublic exploitFix availableEPSS 84.6%7.8 High
- drupal, drupal core, fedoraproject fedora +2 moreDrupal core Unrestricted Upload of File with Dangerous TypeCVE-2020-13671In KEVPublic exploitFix availableEPSS 32.6%8.8 High
- drupal core, drupal +1 moreExposure of Resource to Wrong Sphere in Drupal CoreCVE-2020-13670Fix available7.5 High
- drupal, drupal core +1 moreDrupal Core Access bypass vulnerabilityCVE-2020-13667Fix available5.3 Medium
- drupal core, drupal +1 moreDrupal core Cross-site Scripting (XSS) vulnerability in ckeditorCVE-2020-13669Fix available6.1 Medium
- drupal, drupal core +1 moreDrupal Core Cross-site scripting vulnerabilityCVE-2020-13688Fix available6.1 Medium
- drupal, drupal core +1 moreDrupal Core Cross-site scripting vulnerabilityCVE-2020-13666Fix available6.1 Medium
- drupal, drupal core +1 moreDrupal Core Access bypass vulnerabilityCVE-2020-13665Fix available9.8 Critical
- drupal, drupal core +1 moreDrupal Core Arbitrary PHP code execution vulnerabilityCVE-2020-13664Public exploitFix available8.8 High
- drupal, drupal core +1 moreDrupal Core Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2020-13663Fix available8.8 High
- drupal, drupal core +1 moreDrupal Core Open Redirect vulnerabilityCVE-2020-13662Fix available6.1 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- ckeditor, drupal, fedoraproject fedora +8 more +10 moreCKEditor 4.0 vulnerability in the HTML Data ProcessorCVE-2020-9281Fix available6.1 Medium
- drupal authenticated user page cachingThe Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not...CVE-2013-42266.5 Medium
- drupal restful web services, restful web services web services +1 moreThe RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for...CVE-2013-42258.8 High
- drupal data, drupal, drupal data-module +2 moreDrupal SQL Injection vulnerabilityCVE-2011-27159.8 Critical
- drupal data, drupal, drupal data-module +2 moreDrupal Cross-Site Scripting vulnerabilityCVE-2011-27146.1 Medium
- drupal views dynamic fieldThe Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize...CVE-2019-198268.1 High
- drupal views builk operations, drupal6-views bulk operations bulk operations +1 moreDrupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the...CVE-2011-33736.1 Medium
- activityA cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal.CVE-2012-20798.8 High
- activityCross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal.CVE-2012-20784.8 Medium
- drupal, debian linux, drupal core +2 more +4 moreAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the...CVE-2011-27267.5 High
- drupal svg sanitizerA Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for...CVE-2019-188567.5 High
- Show moreLoading…