Drupal Latest Vulnerabilities

August 29

File Path Disclosure Vulnerability in Drupal 11.x-dev

CVE-2024-45440
DrupalDrupal5.3MEDIUM

July 5

Drupal Wiki vulnerable to XSS via comments, captions, and image titles

CVE-2024-34481
DrupalDrupal Wiki6.1MEDIUM

September 28

Drupal core - Critical - Cache poisoning - SA-CORE-2023-006

CVE-2023-5256
DrupalCore7.5HIGH

May 1

Responsive Menus Configuration Setting responsive_menus.module responsive_menus_admin_form_submit cross site scripting

CVE-2018-25085
DrupalResponsive Menus2.4LOW

April 26

CVE-2022-25278
DrupalCore6.5MEDIUM

CVE-2022-25273
DrupalCore7.5HIGH

CVE-2022-25275
DrupalCore7.5HIGH

CVE-2022-25276
DrupalCore6.1MEDIUM

CVE-2023-31250
DrupalCore6.5MEDIUM

CVE-2022-25274
DrupalCore5.4MEDIUM

CVE-2022-25277
DrupalCore7.2HIGH

February 17

CVE-2022-25270
DrupalCore6.5MEDIUM

February 16

CVE-2022-25271
DrupalCore7.5HIGH

February 11

CVE-2020-13677
DrupalCore7.5HIGH

CVE-2020-13676
DrupalCore6.5MEDIUM

CVE-2020-13670
DrupalCore7.5HIGH

CVE-2020-13674
DrupalCore6.5MEDIUM

CVE-2020-13675
DrupalCore9.8CRITICAL

CVE-2020-13673
DrupalEntity Embed6.1MEDIUM

CVE-2020-13672
DrupalCore6.1MEDIUM

CVE-2020-13669
DrupalCore6.1MEDIUM

Access bypass in Drupal Core 8/9

CVE-2020-13668
DrupalCore6.1MEDIUM

June 11

CVE-2020-13688
DrupalDrupal Core6.1MEDIUM

CVE-2020-13663
DrupalDrupal Core8.8HIGH

May 17

CVE-2020-13667
DrupalDrupal Core5.3MEDIUM

May 5

CVE-2020-13664
DrupalDrupal Core8.8HIGH

CVE-2020-13662
DrupalDrupal Core6.1MEDIUM

CVE-2020-13665
DrupalDrupal Core9.8CRITICAL

CVE-2020-13666
DrupalDrupal Core6.1MEDIUM

December 17

CVE-2020-35191
DrupalDrupal Docker Images👾9.8CRITICAL

November 20

CVE-2020-13671
DrupalDrupal Core👾8.8HIGH

May 28

Drupal core - Critical - Access bypass - SA-CORE-2019-008

CVE-2019-6342
DrupalDrupal Core9.8CRITICAL

February 18

CVE-2013-4226
DrupalAuthenticated User Pag...6.5MEDIUM

January 14

CVE-2011-2715
DrupalData-module9.8CRITICAL

CVE-2011-2714
DrupalData-module6.1MEDIUM

December 16

CVE-2019-19826
DrupalViews Dynamic Field8.1HIGH

November 11

CVE-2019-18856
DrupalSvg Sanitizer7.5HIGH

November 6

CVE-2010-2471
DrupalDrupal66.1MEDIUM

March 26

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004

CVE-2019-6341
DrupalDrupal Core5.4MEDIUM

February 21

Drupal core - Highly critical - Remote Code Execution

CVE-2019-6340
DrupalDrupal Core👾8.1HIGH

January 22

Access bypass in Drupal 8 views

CVE-2017-6923
DrupalDrupal Core6.5MEDIUM

Files uploaded by anonymous users into a private file system can be accessed by other anonymous users

CVE-2017-6922
DrupalDrupal Core6.5MEDIUM

third-party PEAR Archive_Tar library updates

CVE-2019-6338
DrupalDrupal Core8HIGH

PHAR stream wrapper Arbitrary PHP code execution

CVE-2019-6339
DrupalDrupal Core👾9.8CRITICAL

January 15

Search Autocomplete

CVE-2018-7603
Drupal3rd Party Module - Sea...6.1MEDIUM

File REST resource does not properly validate

CVE-2017-6921
DrupalDrupal Core5.9MEDIUM

REST API can bypass comment approval - Access Bypass - Moderately Critical

CVE-2017-6924
DrupalDrupal Core7.4HIGH

CVE-2017-6925
DrupalDrupal9.8CRITICAL

July 19

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

CVE-2018-7602
DrupalCore👾9.8CRITICAL

March 29

CVE-2014-5170
DrupalStorage Api9.8CRITICAL

CVE-2018-7600
DrupalDrupal Before 7.58, 8....👾9.8CRITICAL

October 18

CVE-2015-7943
DrupalDrupal6.1MEDIUM

September 13

CVE-2015-7880
DrupalDrupal4.3MEDIUM

CVE-2015-2749
DrupalDrupal6.1MEDIUM

CVE-2015-2750
DrupalDrupal6.1MEDIUM

April 20

CVE-2017-6919
DrupalDrupal7.5HIGH

March 16

CVE-2017-6379
DrupalDrupal Core7.5HIGH

CVE-2017-6381
DrupalDrupal Core8.1HIGH

CVE-2017-6377
DrupalDrupal Core7.5HIGH

November 25

CVE-2016-9451
DrupalDrupal6.8MEDIUM

CVE-2016-9449
DrupalDrupal4.3MEDIUM

CVE-2016-9452
DrupalDrupal6.5MEDIUM

CVE-2016-9450
DrupalDrupal7.5HIGH

October 3

CVE-2016-7572
DrupalDrupal4.3MEDIUM

CVE-2016-7571
DrupalDrupal6.1MEDIUM

CVE-2016-7570
DrupalDrupal4.3MEDIUM

September 9

CVE-2016-6212
DrupalDrupal5.3MEDIUM

CVE-2016-6211
DrupalDrupal8.8HIGH

April 12

CVE-2016-3164
DrupalDrupal7.4HIGH

CVE-2016-3171
DrupalDrupal8.1HIGH

CVE-2016-3167
DrupalDrupal7.4HIGH

CVE-2016-3162
DrupalDrupal8.1HIGH

CVE-2016-3168
DrupalDrupal6.4MEDIUM

CVE-2016-3165
DrupalDrupal7.5HIGH

August 24

CVE-2015-6660
DrupalDrupal

CVE-2015-6659
DrupalDrupal

CVE-2015-6658
DrupalDrupal

CVE-2015-6661
DrupalDrupal

June 22

CVE-2015-3232
DrupalDrupal

CVE-2015-3231
DrupalDrupal

CVE-2015-3234
DrupalDrupal

CVE-2015-3233
DrupalDrupal

November 24

CVE-2014-9015
DrupalDrupal

CVE-2014-9016
DrupalDrupal👾

November 12

CVE-2014-8734
DrupalOrganic Groups Menu

October 22

CVE-2013-7407
DrupalMrbs Module

October 16

CVE-2014-8296
DrupalModal Frame

CVE-2014-3704
DrupalDrupal👾

October 14

CVE-2014-8765
DrupalProject Issue File Review

October 13

CVE-2014-8748
DrupalDoubleclick For Publis...

CVE-2014-8743
DrupalMaestro

CVE-2014-8746
DrupalSkeleton Theme

CVE-2014-8744
DrupalNivo Slider

CVE-2014-8745
DrupalCustom Search Module

CVE-2014-8747
DrupalCommons

October 9

CVE-2014-8076
DrupalProfessional Theme

CVE-2014-8078
DrupalPrint

CVE-2014-8077
DrupalNewsflash

CVE-2014-8079
DrupalMayo

CVE-2014-8075
DrupalTribune