Filter
AND
-Infinity
0
Trending
Versions
7.0
23
8.0.0
13
6.0
11
7.0-alpha1
10
7.0-alpha2
10
7.0-alpha3
10
7.0-alpha4
10
7.0-alpha5
10
7.0-alpha6
10
7.0-alpha7
10
7.0-beta1
10
7.0-beta2
10
7.0-beta3
10
7.0-dev
10
7.0-rc1
10
7.0-rc2
10
7.0-rc3
10
7.0-rc4
10
7.1
10
7.2
9
7.10
8
7.11
8
7.12
8
7.13
8
7.14
8
7.15
8
7.16
8
7.17
8
7.18
8
7.19
8
9.3.0
8
6.0-beta2
7
6.0-beta3
7
6.0-beta4
7
6.0-dev
7
6.0-rc1
7
6.0-rc2
7
6.0-rc3
7
6.0-rc4
7
6.1
7
6.10
7
6.11
7
6.12
7
6.13
7
6.14
7
6.15
7
6.16
7
6.17
7
6.18
7
6.19
7
Drupal AIAI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021
7.5
EPSS
0.19%
First published (updated )
DrupalDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
7.5
EPSS
0.06%
First published (updated )
DrupalImage Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
7.5
First published (updated )
DrupalDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014
8.8
First published (updated )
composer/drupal/coreDrupal contains a vulnerability with improper handling of structural elements. If this vulnerability…
7.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core - Critical - Cache poisoning - SA-CORE-2023-006
7.5
EPSS
1.62%
First published (updated )
TwigTwig may load a template outside a configured directory when using the filesystem loader
7.5
First published (updated )
composer/drupal/coreDrupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalFailure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
7.5
First published (updated )
DrupalFix failure to strip Authorization header on HTTP downgrade in Guzzle
7.5
First published (updated )
composer/guzzlehttp/guzzleCross-domain cookie leakage in Guzzle
8.1
First published (updated )
composer/guzzlehttp/psr7Improper Input Validation in guzzlehttp/psr7
7.5
First published (updated )
Oracle Financial Services Analytical Applications InfrastructureRegular expression Denial of Service in dialog plugin
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreUnder some circumstances, the Drupal core JSON:API module does not properly restrict access to certa…
7.5
First published (updated )
Oracle Banking APIsHTML comments vulnerability allowing to execute JavaScript code
8.2
First published (updated )
Oracle Banking APIsAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
8.2
First published (updated )
Oracle Primavera GatewayXSS in `*Text` options of the Datepicker widget
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle UnifierXSS in the `of` option of the `.position()` util
7.2
First published (updated )
Oracle UnifierXSS in the `altField` option of the Datepicker widget
7.2
First published (updated )
Red Hat FedoraPEAR Archive_Tar Improper Link Resolution Vulnerability
First published (updated )
Red Hat FedoraPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core Un-restricted Upload of File
First published (updated )
composer/drupal/coreDrupal core - Moderately critical - Information disclosure - SA-CORE-2020-011
7.5
First published (updated )
Red Hat FedoraAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.