Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • M
Access Restriction Bypass		drupal/drupal>=8.0, <8.3.7Composer16 Aug 2017
  • M
Access Restriction Bypass		drupal/drupal>=8.0, <8.3.7Composer16 Aug 2017
  • M
Authentication Bypass		drupal/drupal>=8.0, <8.3.7Composer16 Aug 2017
  • M
Arbitrary File Upload		drupal/drupal>=8.0.0, <8.3.4Composer21 Jun 2017
  • C
Deserialization of Untrusted Data		drupal/drupal>=8.0.0, <8.3.4Composer21 Jun 2017
  • M
Information Exposure		drupal/drupal>=7.0.0, <7.56>=8.0.0, <8.3.4Composer21 Jun 2017
  • H
Access Restriction Bypass		drupal/drupal>=8.3.0, <8.3.1<8.2.8Composer19 Apr 2017
  • H
Cross-site Request Forgery (CSRF)		drupal/drupal>=8.0.0, <8.2.7Composer15 Mar 2017
  • H
Access Restriction Bypass		drupal/drupal>=8.0.0, <8.2.7Composer15 Mar 2017
  • H
Arbitrary Code Execution		drupal/drupal>=8.0.0, <8.2.7Composer15 Mar 2017
  • M
Denial of Service (DoS)		drupal/drupal>=8.0.0, <8.2.3Composer16 Nov 2016
  • M
Information Exposure		drupal/drupal>=8.0.0, <8.2.3Composer16 Nov 2016
  • H
Cache Poisoning		drupal/drupal>=8.0.0, <8.2.3Composer16 Nov 2016
  • M
Access Restriction Bypass		drupal/drupal>=8.0.0, <8.1.10Composer21 Sept 2016
  • M
Access Restriction Bypass		drupal/drupal>=8.0.0, <8.1.10Composer21 Sept 2016
  • M
Cross-site Scripting (XSS)		drupal/drupal>=8.0.0, <8.1.10Composer21 Sept 2016
  • H
HTTP Header Injection		drupal/drupal>=8.0.0, <8.1.7Composer18 Jul 2016
  • M
Information Exposure		drupal/drupal>=8.0.0, <8.1.3Composer15 Jun 2016
  • H
Privilege Escalation		drupal/drupal>=7.0.0, <7.44Composer15 Jun 2016
  • H
Brute Force		drupal/drupal>=6.0.0, <6.38>=7.0.0, <7.43Composer15 Feb 2016
  • H
Open Redirect		drupal/drupal>=6.0.0, <6.38>=7.0.0, <7.43>=8.0.0, <8.0.4Composer15 Feb 2016
  • M
Reflected File Download		drupal/drupal>=6.0.0, <6.38>=7.0.0, <7.43Composer15 Feb 2016
  • H
Denial of Service (DoS)		drupal/drupal>=7.0.0, <7.43>=8.0.0, <8.0.4Composer15 Feb 2016
  • H
Open Redirect		drupal/drupal>=6.0.0, <6.38Composer15 Feb 2016
  • H
Access Restriction Bypass		drupal/drupal>=6.0.0, <6.38Composer15 Feb 2016
  • H
Privilege Escalation		drupal/drupal>=6.0.0, <6.38>=7.0.0, <7.43Composer15 Feb 2016
  • M
HTTP Header Injection		drupal/drupal>=6.0.0, <6.38Composer15 Feb 2016
  • M
Information Exposure		drupal/drupal>=7.0.0, <7.43>=8.0.0, <8.0.4Composer15 Feb 2016
  • H
Deserialization of Untrusted Data		drupal/drupal>=6.0.0, <6.38Composer15 Feb 2016
  • M
Information Exposure		drupal/entity>=1.0.0, <1.9.0Composer21 May 2019