Filter
AND
-Infinity
0

DrupalCSRF

7.5
First published (updated )

Red Hat FedoraPEAR Archive_Tar Improper Link Resolution Vulnerability

First published (updated )

composer/drupal/coreDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003

7.5
EPSS
0.06%
First published (updated )

composer/drupal/coreDrupal core Un-restricted Upload of File

First published (updated )

Red Hat FedoraPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/drupal/coreDrupal Core Remote Code Execution Vulnerability

First published (updated )

Oracle Financial Services Liquidity Risk Measurement and ManagementXSS, Input Validation

First published (updated )

composer/drupal/coreInput Validation

7.5
First published (updated )

composer/drupal/coreMalicious File Upload

7.2
First published (updated )

composer/drupal/coreDrupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DrupalImage Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023

7.5
First published (updated )

DrupalDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014

8.8
First published (updated )

composer/drupal/coreDrupal core - Critical - Cache poisoning - SA-CORE-2023-006

7.5
First published (updated )

Oracle Primavera GatewayXSS in `*Text` options of the Datepicker widget

7.2
First published (updated )

Oracle UnifierXSS in the `of` option of the `.position()` util

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle UnifierXSS in the `altField` option of the Datepicker widget

7.2
First published (updated )

Oracle Banking APIsAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

8.2
First published (updated )

Oracle Banking APIsHTML comments vulnerability allowing to execute JavaScript code

8.2
First published (updated )

composer/drupal/drupalthird-party PEAR Archive_Tar library updates

First published (updated )

DrupalInput Validation

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Angrydonuts NodequeueNodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict…

7.5
First published (updated )

Brian Miller Taxonomy TimerSQL Injection

7.5
First published (updated )

Morbus Iff ActivismThe Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Camp…

7.5
First published (updated )

Fast Permissions AdministrationThe Fast Permissions Administration module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.3 for Dru…

7.5
First published (updated )

David Alkire Drag & Drop GallerySQL Injection

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PEAR XML-RPCCode Injection

7.5
First published (updated )

DrupalUnknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registratio…

7.5
First published (updated )

DrupalDrupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations s…

7.5
First published (updated )

DrupalSQL Injection, Input Validation

7.5
First published (updated )

DrupalUnrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 200701…

8.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203