Drupal is an open source content management platform powering millions of websites and applications. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs built, used, and supported by an active and diverse community of people around the world.

OSVersionArchitecturePackageVersionFilename
Fedora28anydrupal8< 8.6.13UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	28	any	drupal8	< 8.6.13	UNKNOWN

openvas 30

fedora 16

nessus 33

freebsd 3

thn 4

malwarebytes 1

impervablog 2

veracode 5

osv 15

alpinelinux 3

debian 6

github 7

prion 8

checkpoint_advisories 4

ibm 3

zdi 1

drupal 2

ubuntucve 4

cve 7

debiancve 4

attackerkb 2

ubuntu 1

f5 2

seebug 2

threatpost 7

exploitpack 4

dsquare 3

zdt 4

archlinux 1

packetstorm 5

cisa_kev 2

nuclei 1

metasploit 1

saint 3

qualysblog 1

hackerone 1

wallarmlab 1

openvas

Fedora Update for drupal8 FEDORA-2019-79bd99f9a8

2019-04-03 00:00:00

Fedora Update for drupal8 FEDORA-2019-6a0717dc9a

2019-03-08 00:00:00

Fedora Update for drupal8 FEDORA-2018-1ba93b3144

2018-05-12 00:00:00

fedora

[SECURITY] Fedora 28 Update: drupal8-8.6.10-1.fc28

2019-03-07 20:06:44

[SECURITY] Fedora 28 Update: drupal8-8.4.8-1.fc28

2018-05-09 21:27:49

[SECURITY] Fedora 27 Update: drupal8-8.4.8-1.fc27

2018-05-10 19:13:53

nessus

Fedora 26 : drupal8 (2018-922cc2fbaa) (Drupalgeddon 2)

2018-04-24 00:00:00

Fedora 28 : drupal8 (2018-906ba26b4d) (Drupalgeddon 2)

2019-01-03 00:00:00

Drupal 8.x < 8.4.5 Multiple Vulnerabilities

2018-11-05 00:00:00

freebsd

drupal -- Drupal Core - Multiple Vulnerabilities

2018-02-21 00:00:00

drupal -- Drupal core - Moderately critical - Cross Site Scripting

2019-03-20 00:00:00

drupal -- Drupal Core - Multiple Vulnerabilities

2018-03-13 00:00:00

thn

Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack

2018-04-26 12:32:00

Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

2018-04-25 16:41:00

Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit

2018-06-05 08:06:00

malwarebytes

A look into Drupalgeddon’s client-side attacks

2018-05-18 15:00:00

impervablog

The State of Web Application Vulnerabilities in 2018

2019-01-09 14:00:26

Drupalgeddon 2.0: Are Hackers Slacking Off?

2018-04-13 19:13:25

veracode

Remote Code Execution (RCE)

2018-04-26 10:18:46

Cross-site Scripting (XSS)

2019-03-27 05:22:42

Access Restriction Bypass

2018-05-31 05:06:29

osv

CVE-2018-9861

2018-04-19 17:29:00

drupal7 - security update

2019-03-20 00:00:00

Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)

2022-05-14 00:56:02

alpinelinux

CVE-2019-6341

2019-03-26 18:29:00

CVE-2018-7602

2018-07-19 17:29:00

CVE-2018-7600

2018-03-29 07:29:00

debian

[SECURITY] [DLA 1746-1] drupal7 security update

2019-04-01 14:12:36

[SECURITY] [DSA 4180-1] drupal7 security update

2018-04-25 20:13:52

[SECURITY] [DSA 4180-1] drupal7 security update

2018-04-25 20:13:52

github

Drupal Cross Site Scripting (XSS) vulnerability

2022-05-24 16:56:28

Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)

2022-05-14 00:56:02

Drupal Comment reply form allows access to restricted content

2022-05-14 03:35:57

prion

Cross site scripting

2018-04-19 17:29:00

Cross site scripting

2019-03-26 18:29:00

Design/Logic Flaw

2018-03-01 23:29:00

checkpoint_advisories

Drupal Core file_create_filename Stored Cross-Site Scripting (CVE-2019-6341)

2019-11-25 00:00:00

Drupal Core Remote Code Execution (CVE-2018-7602)

2018-04-26 00:00:00

Drupal Core Remote Code Execution (CVE-2018-7600)

2018-03-29 00:00:00

ibm

Security Bulletin: IBM API Connect Developer Portal is impacted by Cross Site Scripting(XSS) in Drupal core (CVE-2019-6341)

2019-04-09 01:20:01

Security Bulletin: API Connect Developer Portal is affected by a Drupal vulnerability (CVE-2018-7602)

2018-06-15 07:09:14

Security Bulletin: API Connect Developer Portal is affected by Drupal vulnerability (CVE-2018-7600)

2018-06-15 07:09:07

zdi

Drupal File file_create_filename Persistent Cross-Site Scripting Vulnerability

2019-03-26 00:00:00

drupal

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004

2019-03-20 00:00:00

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

2018-04-25 00:00:00

ubuntucve

CVE-2019-6341

2019-03-26 00:00:00

CVE-2018-9861

2018-04-19 00:00:00

CVE-2018-7602

2018-07-19 00:00:00

cve

CVE-2018-9861

2018-04-19 17:29:00

CVE-2017-6926

2018-03-01 23:29:00

CVE-2019-6341

2019-03-26 18:29:00

debiancve

CVE-2019-6341

2019-03-26 18:29:00

CVE-2018-7602

2018-07-19 17:29:00

CVE-2018-7600

2018-03-29 07:29:00

attackerkb

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004

2019-03-26 00:00:00

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

2018-07-19 00:00:00

ubuntu

Drupal vulnerabilities

2021-03-15 00:00:00

K59591931 : Drupal vulnerability CVE-2018-7602

2018-04-30 00:00:00

K22854260 : Drupal vulnerability CVE-2018-7600

2018-03-29 00:00:00

seebug

Drupal 8 – CVE-2017-6926漏洞详解

2018-04-03 00:00:00

Drupal core Remote Code Execution(CVE-2018-7602)

2018-04-26 00:00:00

threatpost

Ransomware Attack Hits Ukrainian Energy Ministry, Exploiting Drupalgeddon2

2018-04-24 18:34:37

New Drupalgeddon Attacks Enlist Shellbot to Open Backdoors

2018-10-11 20:24:54

Kitty Cryptomining Malware Cashes in on Drupalgeddon 2.0

2018-05-03 16:57:19

exploitpack

Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)

2018-04-25 00:00:00

Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code (Metasploit)

2018-04-30 00:00:00

Drupal 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution (PoC)

2018-04-13 00:00:00

dsquare

Drupal 7 SA-CORE-2018-004 RCE

2018-05-08 00:00:00

Drupal 8 SA-CORE-2018-002 RCE

2018-05-08 00:00:00

Drupal 7 SA-CORE-2018-002 RCE

2018-05-08 00:00:00

zdt

Drupal < 7.58 - drupalgeddon3 Authenticated Remote Code Execution (PoC) Exploit

2018-04-26 00:00:00

Drupal < 7.58 - Drupalgeddon3 Authenticated Remote Code Exploit

2018-05-01 00:00:00

Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - Drupalgeddon2 Remote Code Execution Exploit

2018-04-18 00:00:00

archlinux

[ASA-201804-10] drupal: arbitrary command execution

2018-04-27 00:00:00

packetstorm

Drupal drupgeddon3 Remote Code Execution

2018-04-26 00:00:00

Drupalgeddon3 Remote Code Execution

2018-04-30 00:00:00

Drupal Drupalgeddon2 Remote Code Execution Ruby Port

2018-04-13 00:00:00

cisa_kev

Drupal Core Remote Code Execution Vulnerability

2022-04-13 00:00:00

Drupal Core Remote Code Execution Vulnerability

2021-11-03 00:00:00

nuclei

Drupal - Remote Code Execution

2022-02-04 19:09:58

metasploit

Drupal Drupalgeddon 2 Forms API Property Injection

2018-04-18 00:05:45

saint

Drupal Form API command execution

2018-04-25 00:00:00

Drupal Form API command execution

2018-04-25 00:00:00

Drupal Form API command execution

2018-04-25 00:00:00

qualysblog

Staying Safe in the Era of Browser-based Cryptocurrency Mining

2018-07-25 17:00:02

hackerone

U.S. Dept Of Defense: [CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.█████████

2020-12-21 07:51:14

wallarmlab

Drupalgeddon Two.

2018-04-20 19:31:22

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for FEDORA:2C56E6076005