drupal/core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-13666Mediumdrupal/core: Drupal Core Cross-site scripting vulnerability CVE-2020-13662Mediumdrupal/core: Drupal Core Open Redirect vulnerability CVE-2019-6341Mediumdrupal/core: Drupal Cross Site Scripting (XSS) vulnerability CVE-2011-2687Highdrupal/core: Drupal Access Control Bypass CVE-2016-3164Highdrupal/drupal: Drupal Open Redirect CVE-2016-3166Mediumdrupal/core: Drupal CRLF injection vulnerability in the drupal_set_header function CVE-2016-3165Highdrupal/core: Drupal Form API ignores access restrictions on submit buttons CVE-2016-3169Highdrupal/core: Drupal saving user accounts can sometimes grant the user all roles CVE-2016-3168Mediumdrupal/core: Drupal Reflected file download vulnerability CVE-2016-3170Mediumdrupal/core: Drupal sensitive information disclosure CVE-2016-3163Highdrupal/core: Drupal Brute force amplification attacks via XML-RPC CVE-2016-3167Highdrupal/core: Drupal Open redirect vulnerability in the drupal_goto function CVE-2016-3162Highdrupal/core: Drupal File upload access bypass and denial of service CVE-2016-3171Highdrupal/core: Drupal arbitrary code execution CVE-2016-7570Mediumdrupal/drupal: Drupal Users without "Administer comments" can set comment visibility on nodes they can edit CVE-2016-7572Mediumdrupal/core: Drupal Unprivileged access to config export CVE-2016-7571Mediumdrupal/core: Drupal Cross-site scripting (XSS) vulnerability CVE-2016-6212Mediumdrupal/core: Drupal Views can allow unauthorized users to see Statistics information CVE-2016-6211Highdrupal/core: Drupal Saving user accounts can sometimes grant the user all roles CVE-2016-9452Mediumdrupal/core: Drupal Denial of service via transliterate mechanism CVE-2016-9450Highdrupal/core: Drupal Incorrect cache context on password reset page CVE-2016-9449Mediumdrupal/core: Drupal sensitive information disclosure CVE-2016-9451Mediumdrupal/core: Drupal Open Redirect CVE-2017-6379Highdrupal/core: Drupal Cross-Site Request Forgery (CSRF)CVE-2017-6929Mediumdrupal/core: Drupal cross site scripting vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo