Drupal is an open source content management platform powering millions of websites and applications. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs built, used, and supported by an active and diverse community of people around the world.

OSVersionArchitecturePackageVersionFilename
Fedora27anydrupal8< 8.4.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	27	any	drupal8	< 8.4.6	UNKNOWN

fedora 13

openvas 23

nessus 19

freebsd 2

debian 4

osv 12

debiancve 4

prion 7

ubuntucve 4

cve 7

veracode 7

seebug 2

exploitpack 3

impervablog 3

zdt 4

metasploit 1

checkpoint_advisories 2

dsquare 2

threatpost 11

ibm 1

saint 3

cisa_kev 1

thn 8

qualysblog 6

alpinelinux 1

f5 1

hackerone 1

packetstorm 4

wallarmlab 1

nuclei 1

archlinux 1

attackerkb 1

exploitdb 3

githubexploit 1

malwarebytes 1

hivepro 1

avleonov 1

securelist 1

ubuntu 1

kitploit 5

talosblog 2

ics 2

fireeye 1

fedora

[SECURITY] Fedora 28 Update: drupal8-8.4.6-3.fc28

2018-04-27 04:14:07

[SECURITY] Fedora 27 Update: drupal7-7.58-1.fc27

2018-04-10 19:11:10

[SECURITY] Fedora 26 Update: drupal7-7.58-1.fc26

2018-04-10 18:30:33

openvas

Fedora Update for drupal8 FEDORA-2018-6e6d8c314b

2018-04-25 00:00:00

Drupal Core Multiple Vulnerabilities (SA-CORE-2018-001) (Linux)

2018-02-22 00:00:00

Fedora Update for drupal7 FEDORA-2018-143886fdbd

2018-04-11 00:00:00

nessus

Fedora 26 : drupal8 (2018-922cc2fbaa) (Drupalgeddon 2)

2018-04-24 00:00:00

Fedora 28 : drupal8 (2018-906ba26b4d) (Drupalgeddon 2)

2019-01-03 00:00:00

FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (57580fcc-1a61-11e8-97e0-00e04c1ea73d)

2018-02-26 00:00:00

freebsd

drupal -- Drupal Core - Multiple Vulnerabilities

2018-02-21 00:00:00

drupal -- Drupal Core - Multiple Vulnerabilities

2018-03-13 00:00:00

debian

[SECURITY] [DLA 1295-1] drupal7 security update

2018-02-28 15:16:47

[SECURITY] [DSA 4156-1] drupal7 security update

2018-03-28 22:31:37

[SECURITY] [DSA 4156-1] drupal7 security update

2018-03-28 22:31:37

osv

drupal7 - security update

2018-02-28 00:00:00

drupal7 - security update

2018-02-24 00:00:00

CVE-2017-6928

2018-03-01 23:29:00

debiancve

CVE-2017-6928

2018-03-01 23:29:00

CVE-2018-7600

2018-03-29 07:29:00

CVE-2017-6927

2018-03-01 23:29:00

prion

Security feature bypass

2018-03-01 23:29:00

Design/Logic Flaw

2018-03-01 23:29:00

Code injection

2018-03-01 23:29:00

ubuntucve

CVE-2017-6928

2018-03-01 00:00:00

CVE-2017-6927

2018-03-01 00:00:00

CVE-2018-7600

2018-03-29 00:00:00

cve

CVE-2017-6928

2018-03-01 23:29:00

CVE-2017-6930

2018-03-01 23:29:00

CVE-2017-6926

2018-03-01 23:29:00

veracode

Access Restriction Bypass

2018-05-31 05:06:29

Unauthorized Access

2018-05-31 04:23:58

Remote Code Execution (RCE)

2018-04-03 05:03:22

seebug

Drupal 8 – CVE-2017-6926漏洞详解

2018-04-03 00:00:00

Drupal core Remote Code Execution(CVE-2018-7600) (Drupalgeddon2)

2018-03-30 00:00:00

exploitpack

Drupal 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution (PoC)

2018-04-13 00:00:00

Drupal 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution (Metasploit)

2018-04-17 00:00:00

Drupal 7.58 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution

2018-04-13 00:00:00

impervablog

Drupalgeddon 2.0: Are Hackers Slacking Off?

2018-04-13 19:13:25

How Imperva’s New Attack Crowdsourcing Secures Your Business’s Applications

2019-02-13 12:52:46

The State of Web Application Vulnerabilities in 2018

2019-01-09 14:00:26

zdt

Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - Drupalgeddon2 Remote Code Execution Exploit

2018-04-18 00:00:00

Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 Drupalgeddon2 Remote Code Execution Exploit

2018-04-13 00:00:00

Drupal Drupalgeddon 2 Forms API Property Injection Exploit

2018-04-26 00:00:00

metasploit

Drupal Drupalgeddon 2 Forms API Property Injection

2018-04-18 00:05:45

checkpoint_advisories

Drupal Core Remote Code Execution (CVE-2018-7600)

2018-03-29 00:00:00

Drupal Core Form Rendering Remote Code Execution (CVE-2018-7600)

2020-11-05 00:00:00

dsquare

Drupal 8 SA-CORE-2018-002 RCE

2018-05-08 00:00:00

Drupal 7 SA-CORE-2018-002 RCE

2018-05-08 00:00:00

threatpost

New Drupalgeddon Attacks Enlist Shellbot to Open Backdoors

2018-10-11 20:24:54

Cryptojacking Attack Targets Make-A-Wish Foundation Website

2018-11-19 16:20:59

Kitty Cryptomining Malware Cashes in on Drupalgeddon 2.0

2018-05-03 16:57:19

ibm

Security Bulletin: API Connect Developer Portal is affected by Drupal vulnerability (CVE-2018-7600)

2018-06-15 07:09:07

saint

Drupal Form API command execution

2018-04-25 00:00:00

Drupal Form API command execution

2018-04-25 00:00:00

Drupal Form API command execution

2018-04-25 00:00:00

cisa_kev

Drupal Core Remote Code Execution Vulnerability

2021-11-03 00:00:00

thn

Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit

2018-06-05 08:06:00

Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday

2018-04-14 08:29:00

Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack

2018-04-26 12:32:00

qualysblog

Staying Safe in the Era of Browser-based Cryptocurrency Mining

2018-07-25 17:00:02

Detecting Apache Struts 2 Namespace RCE: CVE-2018-11776

2018-08-23 20:27:19

Microsoft Misfires with Meltdown Patch, while WannaCry Pops Up at Boeing

2018-04-02 18:02:51

alpinelinux

CVE-2018-7600

2018-03-29 07:29:00

K22854260 : Drupal vulnerability CVE-2018-7600

2018-03-29 00:00:00

hackerone

U.S. Dept Of Defense: [CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.█████████

2020-12-21 07:51:14

packetstorm

Drupalgeddon2 Drupal Remote Code Execution

2018-04-17 00:00:00

Drupal Drupalgeddon2 Remote Code Execution Ruby Port

2018-04-13 00:00:00

Drupal Drupalgeddon2 Remote Code Execution

2018-04-13 00:00:00

wallarmlab

Drupalgeddon Two.

2018-04-20 19:31:22

nuclei

Drupal - Remote Code Execution

2021-02-15 13:33:33

archlinux

[ASA-201804-1] drupal: arbitrary code execution

2018-04-01 00:00:00

attackerkb

Drupalgeddon 2

2018-03-29 00:00:00

exploitdb

Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit)

2018-04-17 00:00:00

Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC)

2018-04-13 00:00:00

Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution

2018-04-13 00:00:00

githubexploit

Exploit for Improper Input Validation in Drupal

2020-08-31 22:55:18

malwarebytes

A look into Drupalgeddon’s client-side attacks

2018-05-18 15:00:00

hivepro

Muhstik botnet adds another vulnerability exploit to its arsenal

2022-03-29 12:17:03

avleonov

Vulnerability Databases: Classification and Registry

2018-06-05 15:57:41

securelist

Incident Response Analyst Report 2019

2020-08-06 10:00:34

ubuntu

Drupal vulnerabilities

2021-03-15 00:00:00

kitploit

Darksplitz - Exploit Framework

2019-04-04 21:12:00

Sn1per v5.0 - Automated Pentest Recon Scanner

2018-07-05 13:45:00

Sn1per v6.0 - Automated Pentest Framework For Offensive Security Experts

2018-11-24 12:43:00

talosblog

Cisco Talos Honeypot Analysis Reveals Rise in Attacks on Elasticsearch Clusters

2019-02-26 10:56:00

DNS Hijacking Abuses Trust In Core Internet Service

2019-04-18 16:08:25

ics

Top 10 Routinely Exploited Vulnerabilities

2020-05-12 12:00:00

Top Routinely Exploited Vulnerabilities

2021-08-20 12:00:00

fireeye

Think Fast: Time Between Disclosure, Patch Release and Vulnerability Exploitation — Intelligence for Vulnerability Management, Part Two

2020-04-13 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for FEDORA:9DFEE60469B4