Drupal vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
14 matching records
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 15.70%May 20, 2026
- Unknownmarketo_ma_project marketo_ma Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.95%Sep 19, 2024
- Unknownubercart ubercart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Jan 26, 2022
- UnknownDrupal avatar_uploader Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 55.08%Apr 12, 2021
- UnknownDrupal Drupal Core Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.97%Apr 12, 2021
- UnknownJQuery JQuery Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 86.82%Jan 21, 2021
- High7.5PEAR Archive_Tar Improper Link Resolution VulnerabilityPatch nowKEVEPSS 70.59%Jan 18, 2021
- High8.8Drupal core Un-restricted Upload of FilePatch nowKEVEPSS 35.35%Nov 20, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.55%Nov 19, 2020
- Medium6.1JQuery Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 84.89%Apr 29, 2020
- High8.1Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 92.02%Feb 21, 2019
- Critical9.8Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.17%Jul 19, 2018
- Critical9.8Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Mar 29, 2018
- UnknownDrupal Drupal Core Files or Directories Accessible to External PartiesPatch nowKEVEPSS 1.95%Jun 21, 2017