Filter
AND
-Infinity
0
Trending
Versions
7.0
23
8.0.0
13
6.0
11
7.0-alpha1
10
7.0-alpha2
10
7.0-alpha3
10
7.0-alpha4
10
7.0-alpha5
10
7.0-alpha6
10
7.0-alpha7
10
7.0-beta1
10
7.0-beta2
10
7.0-beta3
10
7.0-dev
10
7.0-rc1
10
7.0-rc2
10
7.0-rc3
10
7.0-rc4
10
7.1
10
7.2
9
7.10
8
7.11
8
7.12
8
7.13
8
7.14
8
7.15
8
7.16
8
7.17
8
7.18
8
7.19
8
9.3.0
8
6.0-beta2
7
6.0-beta3
7
6.0-beta4
7
6.0-dev
7
6.0-rc1
7
6.0-rc2
7
6.0-rc3
7
6.0-rc4
7
6.1
7
6.10
7
6.11
7
6.12
7
6.13
7
6.14
7
6.15
7
6.16
7
6.17
7
6.18
7
6.19
7
DrupalDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
7.5
EPSS
0.06%
First published (updated )
Drupal AIAI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021
7.5
EPSS
0.19%
First published (updated )
Oracle Financial Services Analytical Applications InfrastructureRegular expression Denial of Service in dialog plugin
7.5
First published (updated )
composer/guzzlehttp/psr7Improper Input Validation in guzzlehttp/psr7
7.5
First published (updated )
composer/guzzlehttp/guzzleCross-domain cookie leakage in Guzzle
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalFailure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
7.5
First published (updated )
DrupalFix failure to strip Authorization header on HTTP downgrade in Guzzle
7.5
First published (updated )
TwigTwig may load a template outside a configured directory when using the filesystem loader
7.5
First published (updated )
Red Hat FedoraPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
First published (updated )
Red Hat FedoraPEAR Archive_Tar Improper Link Resolution Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupallib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote a…
7.5
First published (updated )
composer/drupal/coreDrupal core Un-restricted Upload of File
First published (updated )
composer/drupal/coreDrupal Core Remote Code Execution Vulnerability
First published (updated )
Oracle Financial Services Liquidity Risk Measurement and ManagementXSS, Input Validation
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
7.5
First published (updated )
DrupalImage Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
7.5
First published (updated )
DrupalDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core - Critical - Cache poisoning - SA-CORE-2023-006
7.5
EPSS
1.62%
First published (updated )
Oracle Primavera GatewayXSS in `*Text` options of the Datepicker widget
7.2
First published (updated )
Oracle UnifierXSS in the `of` option of the `.position()` util
7.2
First published (updated )
Oracle UnifierXSS in the `altField` option of the Datepicker widget
7.2
First published (updated )
Oracle Banking APIsAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Banking APIsHTML comments vulnerability allowing to execute JavaScript code
8.2
First published (updated )
composer/drupal/drupalthird-party PEAR Archive_Tar library updates
8
First published (updated )
Angrydonuts NodequeueNodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.