Drupal is an open source content management platform powering millions of websites and applications. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs built, used, and supported by an active and diverse community of people around the world.

OSVersionArchitecturePackageVersionFilename
Fedora28anydrupal8< 8.6.15UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	28	any	drupal8	< 8.6.15	UNKNOWN

openvas 31

fedora 26

nessus 35

ibm 3

freebsd 3

drupal 2

osv 19

debian 6

thn 5

malwarebytes 1

impervablog 1

veracode 5

prion 6

cve 6

symfony 2

debiancve 4

github 7

ubuntucve 4

ubuntu 1

seebug 2

checkpoint_advisories 3

exploitpack 2

dsquare 2

threatpost 5

f5 2

attackerkb 1

archlinux 1

zdt 3

packetstorm 3

alpinelinux 2

cisa_kev 2

nuclei 1

saint 1

qualysblog 1

hackerone 1

openvas

Fedora Update for drupal8 FEDORA-2019-1a3edd7e8a

2019-05-08 00:00:00

Fedora Update for drupal8 FEDORA-2018-7d748596e9

2018-12-04 00:00:00

Fedora Update for drupal8 FEDORA-2018-8fd924a53d

2018-05-16 00:00:00

fedora

[SECURITY] Fedora 28 Update: drupal8-8.6.2-1.fc28

2018-12-03 01:39:06

[SECURITY] Fedora 27 Update: drupal8-8.4.8-1.fc27

2018-05-10 19:13:53

[SECURITY] Fedora 28 Update: drupal8-8.6.10-1.fc28

2019-03-07 20:06:44

nessus

Fedora 28 : drupal8 (2018-906ba26b4d) (Drupalgeddon 2)

2019-01-03 00:00:00

Fedora 26 : drupal8 (2018-922cc2fbaa) (Drupalgeddon 2)

2018-04-24 00:00:00

Fedora 29 : drupal8 (2019-7eaf0bbe7c)

2019-05-08 00:00:00

ibm

Security Bulletin: IBM API Connect's Developer Portal is impacted by vulnerabilities in Drupal core (CVE-2019-10909 CVE-2019-10910 CVE-2019-10911 CVE-2019-11358)

2019-05-31 13:40:01

Security Bulletin: API Connect Developer Portal is affected by a Drupal vulnerability (CVE-2018-7602)

2018-06-15 07:09:14

Security Bulletin: API Connect Developer Portal is affected by Drupal vulnerability (CVE-2018-7600)

2018-06-15 07:09:07

freebsd

drupal -- Drupal core - Moderately critical

2019-04-17 00:00:00

drupal -- Drupal Core - Multiple Vulnerabilities

2018-02-21 00:00:00

drupal -- Drupal Core - Multiple Vulnerabilities

2018-03-13 00:00:00

drupal

Drupal core - Moderately critical - Multiple Vulnerabilities - SA-CORE-2019-005

2019-04-17 00:00:00

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

2018-04-25 00:00:00

osv

symfony - security update

2019-05-06 00:00:00

symfony - security update

2019-05-10 00:00:00

Symfony Cross-site Scripting (XSS) vulnerability

2019-11-12 23:00:53

debian

[SECURITY] [DLA 1778-1] symfony security update

2019-05-06 19:15:39

[SECURITY] [DSA 4441-1] symfony security update

2019-05-10 06:26:19

[SECURITY] [DSA 4441-1] symfony security update

2019-05-10 06:26:19

thn

Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately

2018-04-25 16:41:00

Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack

2018-04-26 12:32:00

Drupal Releases Core CMS Updates to Patch Several Vulnerabilities

2019-04-17 21:51:00

malwarebytes

A look into Drupalgeddon’s client-side attacks

2018-05-18 15:00:00

impervablog

The State of Web Application Vulnerabilities in 2018

2019-01-09 14:00:26

veracode

Remote Code Execution (RCE)

2018-04-26 10:18:46

Cross-site Scripting (XSS)

2019-04-18 04:55:27

Remote Code Execution (RCE)

2019-04-18 02:43:58

prion

Input validation

2019-05-16 22:29:00

Cross site scripting

2018-04-19 17:29:00

Sql injection

2019-05-16 22:29:00

cve

CVE-2019-10909

2019-05-16 22:29:00

CVE-2019-10910

2019-05-16 22:29:00

CVE-2018-9861

2018-04-19 17:29:00

symfony

CVE-2019-10909: Escape validation messages in the PHP templating engine

2019-04-17 00:00:00

CVE-2019-10910: Check service IDs are valid

2019-04-17 00:00:00

debiancve

CVE-2019-10909

2019-05-16 22:29:00

CVE-2019-10910

2019-05-16 22:29:00

CVE-2018-7602

2018-07-19 17:29:00

github

Symfony Cross-site Scripting (XSS) vulnerability

2019-11-12 23:00:53

Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)

2022-05-14 00:56:02

Symfony Service IDs Allow Injection

2019-11-18 17:27:31

ubuntucve

CVE-2019-10909

2019-05-16 00:00:00

CVE-2019-10910

2019-05-16 00:00:00

CVE-2018-9861

2018-04-19 00:00:00

ubuntu

Drupal vulnerabilities

2021-03-15 00:00:00

seebug

Drupal 8 – CVE-2017-6926漏洞详解

2018-04-03 00:00:00

Drupal core Remote Code Execution(CVE-2018-7602)

2018-04-26 00:00:00

checkpoint_advisories

Drupal Core Remote Code Execution (CVE-2018-7602)

2018-04-26 00:00:00

Drupal Core Remote Code Execution (CVE-2018-7600)

2018-03-29 00:00:00

Drupal Core Form Rendering Remote Code Execution (CVE-2018-7600)

2020-11-05 00:00:00

exploitpack

Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)

2018-04-25 00:00:00

Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code (Metasploit)

2018-04-30 00:00:00

dsquare

Drupal 7 SA-CORE-2018-004 RCE

2018-05-08 00:00:00

Drupal 8 SA-CORE-2018-002 RCE

2018-05-08 00:00:00

threatpost

Ransomware Attack Hits Ukrainian Energy Ministry, Exploiting Drupalgeddon2

2018-04-24 18:34:37

New Drupalgeddon Attacks Enlist Shellbot to Open Backdoors

2018-10-11 20:24:54

Kitty Cryptomining Malware Cashes in on Drupalgeddon 2.0

2018-05-03 16:57:19

K59591931 : Drupal vulnerability CVE-2018-7602

2018-04-30 00:00:00

K22854260 : Drupal vulnerability CVE-2018-7600

2018-03-29 00:00:00

attackerkb

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

2018-07-19 00:00:00

archlinux

[ASA-201804-10] drupal: arbitrary command execution

2018-04-27 00:00:00

zdt

Drupal < 7.58 - drupalgeddon3 Authenticated Remote Code Execution (PoC) Exploit

2018-04-26 00:00:00

Drupal < 7.58 - Drupalgeddon3 Authenticated Remote Code Exploit

2018-05-01 00:00:00

Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 Drupalgeddon2 Remote Code Execution Exploit

2018-04-13 00:00:00

packetstorm

Drupal drupgeddon3 Remote Code Execution

2018-04-26 00:00:00

Drupalgeddon3 Remote Code Execution

2018-04-30 00:00:00

Drupalgeddon2 Drupal Remote Code Execution

2018-04-17 00:00:00

alpinelinux

CVE-2018-7602

2018-07-19 17:29:00

CVE-2018-7600

2018-03-29 07:29:00

cisa_kev

Drupal Core Remote Code Execution Vulnerability

2022-04-13 00:00:00

Drupal Core Remote Code Execution Vulnerability

2021-11-03 00:00:00

nuclei

Drupal - Remote Code Execution

2022-02-04 19:09:58

saint

Drupal Form API command execution

2018-04-25 00:00:00

qualysblog

Staying Safe in the Era of Browser-based Cryptocurrency Mining

2018-07-25 17:00:02

hackerone

U.S. Dept Of Defense: [CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.█████████

2020-12-21 07:51:14

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for FEDORA:3F234602D69C