Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • C
Arbitrary Code Execution		drupal/drupal>=0.0.0, <7.58>=8.0.0, <8.3.9>=8.4.0, <8.4.6>=8.5.0, <8.5.1Composer2 Apr 2018
  • M
Cross-site Scripting (XSS)		drupal/drupal>=7.0.0, <7.57>=8.0.0, <8.4.5Composer6 Mar 2018
  • M
Cross-site Scripting (XSS)		drupal/drupal>=7.0.0, <7.57>=8.0.0, <8.4.0Composer6 Mar 2018
  • M
Access Restriction Bypass		drupal/drupal>=8.0, <8.4.5Composer6 Mar 2018
  • M
Link Injection		drupal/drupal>=7.0, <7.57Composer6 Mar 2018
  • M
Access Restriction Bypass		drupal/drupal>=7.0, <7.57Composer6 Mar 2018
  • H
Information Exposure		drupal/drupal>=8.4.0, <8.4.5Composer6 Mar 2018
  • H
Access Restriction Bypass		drupal/drupal>=8.4.0, <8.4.5Composer6 Mar 2018
  • M
Access Restriction Bypass		drupal/drupal>=8.0, <8.3.7Composer16 Aug 2017
  • M
Access Restriction Bypass		drupal/drupal>=8.0, <8.3.7Composer16 Aug 2017
  • M
Authentication Bypass		drupal/drupal>=8.0, <8.3.7Composer16 Aug 2017
  • M
Arbitrary File Upload		drupal/drupal>=8.0.0, <8.3.4Composer21 Jun 2017
  • C
Deserialization of Untrusted Data		drupal/drupal>=8.0.0, <8.3.4Composer21 Jun 2017
  • M
Information Exposure		drupal/drupal>=7.0.0, <7.56>=8.0.0, <8.3.4Composer21 Jun 2017
  • H
Access Restriction Bypass		drupal/drupal>=8.3.0, <8.3.1<8.2.8Composer19 Apr 2017
  • H
Arbitrary Code Execution		drupal/drupal>=8.0.0, <8.2.7Composer15 Mar 2017
  • H
Access Restriction Bypass		drupal/drupal>=8.0.0, <8.2.7Composer15 Mar 2017
  • H
Cross-site Request Forgery (CSRF)		drupal/drupal>=8.0.0, <8.2.7Composer15 Mar 2017
  • M
Information Exposure		drupal/drupal>=8.0.0, <8.2.3Composer16 Nov 2016
  • M
Denial of Service (DoS)		drupal/drupal>=8.0.0, <8.2.3Composer16 Nov 2016
  • H
Cache Poisoning		drupal/drupal>=8.0.0, <8.2.3Composer16 Nov 2016
  • M
Access Restriction Bypass		drupal/drupal>=8.0.0, <8.1.10Composer21 Sept 2016
  • M
Access Restriction Bypass		drupal/drupal>=8.0.0, <8.1.10Composer21 Sept 2016
  • M
Cross-site Scripting (XSS)		drupal/drupal>=8.0.0, <8.1.10Composer21 Sept 2016
  • H
HTTP Header Injection		drupal/drupal>=8.0.0, <8.1.7Composer18 Jul 2016
  • H
Privilege Escalation		drupal/drupal>=7.0.0, <7.44Composer15 Jun 2016
  • M
Information Exposure		drupal/drupal>=8.0.0, <8.1.3Composer15 Jun 2016
  • M
Reflected File Download		drupal/drupal>=6.0.0, <6.38>=7.0.0, <7.43Composer15 Feb 2016
  • H
Deserialization of Untrusted Data		drupal/drupal>=6.0.0, <6.38Composer15 Feb 2016
  • H
Open Redirect		drupal/drupal>=6.0.0, <6.38Composer15 Feb 2016