Drupal الثغرات

التسلسل الزمني

النوع

منتج

Drupal CMS6
Drupal Print6
Drupal Help Tip module4
Drupal Organic Groups Module4
Drupal E-Publish4

معالجة

Official Fix142
Temporary Fix0
Workaround0
Unavailable0
Not Defined16

قابلية الاستغلال

High64
Functional0
Proof-of-Concept46
Unproven12
Not Defined36

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent0
Network158

توثيق

Not Defined0
High0
Low60
None98

تفاعل المستخدم

Not Defined0
Required98
None60

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤448
≤534
≤618
≤726
≤826
≤90
≤106

CVSSv3 Temp

≤10
≤20
≤32
≤452
≤540
≤632
≤724
≤82
≤92
≤104

VulDB

≤10
≤20
≤30
≤448
≤536
≤616
≤728
≤824
≤90
≤106

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k2
<2k104
<5k52
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k158
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (114): Acidfree (1), Administrator (1), Aggregation module (3), Ajax Checklist (2), Archive Module (1), Atom Module (1), BUEditor (1), Bibliography Module (2), BlueMasters (1), Brilliant Gallery (2), CCK comment reference (1), CMS (6), Chatroom Module (2), Comment Mail (1), Comment Upload Module (1), Commons (1), Content Construction Kit (3), Context Form Alteration module (1), Counter module (1), Custom Search module (2), Cvs Management And Tracker (1), Database Administration Module (2), Devel module (1), Doubleclick for Publishers (1), Drupal Pathauto Module (1), Drupal Project Issue Tracking (2), Drupal Pubcookie Module (1), E-Commerce Module (1), E-Publish (2), Easylinks Module (2), Entity API module (1), EveryBlog (4), Extended Tracker (1), FAQ (1), Feature Module (1), Feedapi Mapper (1), Fileshare module (1), Form Mail Module (1), Forward module (1), Header Image (1), Help Tip module (2), Imce Module (2), Internationalization (2), Job Search (1), Link module (1), Link to Us (1), Localization client (2), Localizer (1), LoginToboggan module (2), MAYO (1), Maestro (1), Magic Tabs module (1), Mailhandler (1), Mailsave (1), Mediafield Module (1), Meta Tags Module (1), Modal Frame (1), MySite (1), NewsFlash (1), News Page (1), Nivo Slider (1), Node Clone (1), Node Hierarchy module (1), Nodeaccess Userreference (1), Nodefamily (1), Nodequeue (1), OpenID (1), Organic Groups Menu (1), Organic Groups Module (2), Outline Designer module (1), Paypal Node Module (1), Petition Node module (1), Plus1 (1), Print (5), Print module (1), Professional theme (1), Project (1), Project Issue File Review (1), Project Issue Tracking Module (3), Project Issue Tracking module (2), Project issue tracking module (1), Protected Node module (1), Quiz (1), Randomizer (1), Search Keyword Module (1), Secure Site Module (2), Semantically Interconnected Online Communities (1), Services Module For Drupal (1), Shindig-Integrator (3), Shoutbox (1), SimpleCorp (1), Site Profile Directory Module (1), Skeleton theme (1), Stock Module (1), Suggested Terms module (1), Talk (2), Tasklist (1), Taxonomy Autotagger module (2), Taxonomy Image module (1), Taxonomy Theme module (1), Taxonomy manager (1), Tinytax Taxonomy Block Module (1), TrailScout module (2), Tribune (1), Ubercart Module (3), User Karma module (2), Userpoints Module (1), Userreview module (1), Views (2), Views Bulk Operations (1), Webform Module (1), Workflow (1), Zen (1), linkchecker (1)

Link to Vendor Website: https://www.drupal.org/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
10/04/20185.45.1Drupal Entity API module Access Restriction تجاوز الصلاحياتContent Management SystemNot DefinedOfficial Fix0.002240.00CVE-2014-1400
16/08/20178.07.7Drupal CMS تجاوز الصلاحياتContent Management SystemNot DefinedOfficial Fix0.010900.02CVE-2017-6925
16/08/20174.64.5Drupal CMS REST API تجاوز الصلاحياتContent Management SystemNot DefinedOfficial Fix0.009530.03CVE-2017-6924
16/08/20174.34.2Drupal CMS Ajax Endpoint تجاوز الصلاحياتContent Management SystemNot DefinedOfficial Fix0.001550.00CVE-2017-6923
21/04/20154.34.1Drupal Administrator طلب تزوير مشتركContent Management SystemNot DefinedOfficial Fix0.001600.00CVE-2015-3351
12/11/20144.34.1Drupal Organic Groups Menu Administration Page تجاوز الصلاحياتContent Management SystemNot DefinedOfficial Fix0.001200.00CVE-2014-8734
16/10/20144.34.0Drupal Modal Frame سكربتات مشتركةContent Management SystemHighOfficial Fix0.002200.02CVE-2014-8296
14/10/20144.34.1Drupal Project Issue File Review سكربتات مشتركةFeedback SoftwareNot DefinedOfficial Fix0.001400.00CVE-2014-8765
13/10/20143.53.4Drupal Doubleclick for Publishers سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.000820.00CVE-2014-8748
13/10/20144.34.1Drupal Commons Commons Module سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.002650.00CVE-2014-8747
13/10/20143.53.4Drupal Skeleton theme سكربتات مشتركةContent Management SystemHighOfficial Fix0.001020.00CVE-2014-8746
13/10/20143.53.4Drupal Custom Search module Search Module سكربتات مشتركةContent Management SystemHighOfficial Fix0.001110.00CVE-2014-8745
13/10/20143.53.4Drupal Nivo Slider سكربتات مشتركةContent Management SystemHighOfficial Fix0.001110.02CVE-2014-8744
13/10/20143.53.4Drupal Maestro سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.001110.02CVE-2014-8743
09/10/20143.53.4Drupal MAYO MAYO Theme سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.001160.00CVE-2014-8079
09/10/20143.53.4Drupal Print سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.001160.00CVE-2014-8078
09/10/20143.53.4Drupal NewsFlash سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.001160.00CVE-2014-8077
09/10/20143.53.4Drupal Professional theme سكربتات مشتركةContent Management SystemHighOfficial Fix0.001020.00CVE-2014-8076
09/10/20143.53.5Drupal Tribune سكربتات مشتركةContent Management SystemNot DefinedNot Defined0.001200.00CVE-2014-8075
08/10/20143.53.4Drupal Zen template.php سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.000890.00CVE-2014-7980
08/10/20143.53.4Drupal SimpleCorp سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.001110.00CVE-2014-7979
08/10/20143.53.4Drupal BlueMasters سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.001110.00CVE-2014-7978
06/10/20143.53.4Drupal Custom Search module Search Module سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.000820.00CVE-2014-7870
06/10/20143.53.4Drupal Context Form Alteration module سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.000820.00CVE-2014-7869
25/09/20124.34.1Drupal FAQ سكربتات مشتركةContent Management SystemNot DefinedOfficial Fix0.003410.02CVE-2012-1646

133 بعض الادخالات لم يتم عرضها

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!