Filter
AND
-Infinity
0
Trending
Software
drupal
95
drupal drupal
3
drupal views
3
drupal chatroom module
2
drupal migrate
2
drupal shindig integrator
2
drupal activity
1
drupal aggregation module
1
drupal ai
1
drupal allow all file extensions
1
drupal audio module
1
drupal avatar uploader
1
drupal bibliography module
1
drupal database administration module
1
drupal easylinks module
1
drupal extended tracker
1
drupal fileshare module
1
drupal flag
1
drupal form mail module
1
drupal forward module
1
drupal help tip module
1
drupal id counter module
1
drupal job search
1
drupal mailhandler
1
drupal mediafield module
1
drupal print
1
drupal project issue tracking module
1
drupal pubcookie module
1
drupal quick tabs
1
drupal secure site module
1
drupal svg sanitizer
1
drupal trailscout module
1
Drupal AIAI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021
7.5
EPSS
0.19%
First published (updated )
composer/drupal/coreDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
7.5
EPSS
0.06%
First published (updated )
Drupal Allow All File ExtensionsAllow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075
7.3
First published (updated )
OpignoOpigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029
7.5
First published (updated )
Drupal MigrateMigrate queue importer - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-024
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DrupalImage Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
7.5
First published (updated )
Drupal ViewsREST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018
7.5
First published (updated )
DrupalDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014
8.8
First published (updated )
Drupal MigrateMigrate Tools - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-008
8.8
First published (updated )
Open SocialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal contains a vulnerability with improper handling of structural elements. If this vulnerability…
7.5
EPSS
0.05%
First published (updated )
composer/drupal/coreDrupal core - Critical - Cache poisoning - SA-CORE-2023-006
7.5
First published (updated )
TwigTwig may load a template outside a configured directory when using the filesystem loader
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/drupal/coreDrupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
7.5
First published (updated )
DrupalFailure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
7.5
First published (updated )
DrupalFix failure to strip Authorization header on HTTP downgrade in Guzzle
7.5
First published (updated )
composer/guzzlehttp/guzzleCross-domain cookie leakage in Guzzle
8.1
First published (updated )
composer/guzzlehttp/psr7Improper Input Validation in guzzlehttp/psr7
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Financial Services Analytical Applications InfrastructureRegular expression Denial of Service in dialog plugin
7.5
First published (updated )
composer/drupal/coreUnder some circumstances, the Drupal core JSON:API module does not properly restrict access to certa…
7.5
First published (updated )
Oracle Banking APIsHTML comments vulnerability allowing to execute JavaScript code
8.2
First published (updated )
Oracle Banking APIsAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Primavera GatewayXSS in `*Text` options of the Datepicker widget
7.2
First published (updated )
Oracle UnifierXSS in the `of` option of the `.position()` util
7.2
First published (updated )
Oracle UnifierXSS in the `altField` option of the Datepicker widget
7.2
First published (updated )
Red Hat FedoraPEAR Archive_Tar Improper Link Resolution Vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.