Drupal Vulnérabilités

Chronologie

L'année dernière

Version

7.065
7.163
7.263
7.1062
6.062

Contre-mesures

Official Fix213
Temporary Fix0
Workaround2
Unavailable2
Not Defined28

Exploitabilité

High23
Functional0
Proof-of-Concept44
Unproven16
Not Defined162

Vecteur d'accès

Not Defined0
Physical0
Local4
Adjacent9
Network232

Authentification

Not Defined0
High2
Low83
None160

Interaction de l'utilisateur

Not Defined0
Required115
None130

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤427
≤571
≤659
≤738
≤836
≤910
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤442
≤578
≤660
≤741
≤815
≤97
≤102

VulDB

≤10
≤20
≤32
≤429
≤572
≤654
≤735
≤840
≤99
≤104

NVD

≤10
≤20
≤30
≤40
≤55
≤67
≤717
≤814
≤99
≤105

CNA

≤13
≤20
≤30
≤40
≤51
≤61
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k42
<2k111
<5k92
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k241
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (495): 1.0, 1.7, 1.53, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, 3.24, 3.25, 3.26, 3.27, 3.28, 3.29, 3.30, 3.31, 3.32, 3.33, 3.34, 3.35, 3.36, 3.37, 3.38, 3.39, 3.40, 3.41, 3.42, 3.43, 3.44, 3.45, 3.46, 3.47, 3.48, 3.49, 3.50, 3.51, 3.52, 3.53, 3.54, 3.55, 3.56, 3.57, 3.58, 3.59, 3.60, 3.61, 3.62, 3.63, 3.64, 3.65, 3.66, 3.67, 3.70.1, 3.70.2, 3.70.3, 4, 4.0, 4.1, 4.2, 4.2.0 Rc, 4.3, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.11, 4.7, 4.7 Rev1.15, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 4.7.8, 4.7.x-1, 4.7.x-1.1, 4.7.x-1.2, 4.7_2, 4.7_2.1, 5, 5.0, 5.1, 5.1 Rev1.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.7, 5.8, 5.9, 5.10, 5.11, 5.12, 5.13, 5.14, 5.15, 5.16, 5.17, 5.18, 5.19, 5.20, 5.21, 5.22, 5.23, 5.x-1, 5.x-1.1, 5.x-1.2, 5.x-1.3, 5.x-1.4, 5.x-1.5, 5.x-1.6, 5.x-1.7, 5.x-1.8, 5.x-1.9, 6, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 6.11, 6.12, 6.13, 6.14, 6.15, 6.16, 6.17, 6.18, 6.19, 6.20, 6.21, 6.22, 6.23, 6.24, 6.25, 6.26, 6.27, 6.28, 6.29, 6.30, 6.31, 6.32, 6.33, 6.34, 6.35, 6.36, 6.37, 6.x-, 6.x-0.1, 6.x-0.2, 6.x-0.3, 6.x-0.4, 6.x-0.5, 6.x-0.6, 6.x-0.7, 6.x-0.8, 6.x-0.9, 6.x-0.11, 6.x-0.12, 6.x-1, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.4, 6.x-1.5, 6.x-1.6, 6.x-1.7, 6.x-1.8, 6.x-1.9, 6.x-1.11, 6.x-1.12, 6.x-1.13, 6.x-1.14, 6.x-1.15, 6.x-1.16, 6.x-1.17, 6.x-1.18, 6.x-1.19, 6.x-3, 6.x-3.1, 6.x-3.2, 6.x-3.3, 6.x-3.4, 6.x-3.18, 7.0, 7.0-dev, 7.01, 7.02, 7.03, 7.04, 7.05, 7.06, 7.07, 7.08, 7.09, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.14, 7.15, 7.16, 7.17, 7.18, 7.19, 7.20, 7.21, 7.22, 7.23, 7.24, 7.25, 7.26, 7.27, 7.28, 7.29, 7.30, 7.31, 7.32, 7.33, 7.34, 7.35, 7.36, 7.37, 7.38, 7.39, 7.40, 7.41, 7.42, 7.43, 7.44, 7.45, 7.46, 7.47, 7.48, 7.49, 7.50, 7.51, 7.52, 7.53, 7.54, 7.55, 7.56, 7.57, 7.58, 7.59, 7.60, 7.61, 7.62, 7.63, 7.64, 7.65, 7.66, 7.67, 7.68, 7.69, 7.70, 7.71, 7.72, 7.73, 7.74, 7.75, 7.76, 7.77, 7.78, 7.79, 7.80, 7.81, 7.82, 7.83, 7.84, 7.85, 7.86, 7.87, 7.88, 7.89, 7.90, 7.x-1, 7.x-1.1, 7.x-1.2, 7.x-1.3, 7.x-2, 7.x-3, 7.x-3.1, 7.x-3.2, 7.x-3.3, 7.x-3.4, 7.x-3.5, 7.x-3.6, 7.x-3.7, 7.x-3.8, 7.x-3.9, 7.x-3.11, 7.x-3.12, 7.x-3.13, 8, 8.0, 8.0.1, 8.0.2, 8.0.3, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.2, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.3, 8.3.1, 8.3.2, 8.3.3, 8.3.4, 8.3.5, 8.3.6, 8.3.7, 8.3.8, 8.4, 8.4.1, 8.4.2, 8.4.3, 8.4.4, 8.4.5, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.6, 8.6.1, 8.6.2, 8.6.3, 8.6.4, 8.6.5, 8.6.6, 8.6.7, 8.6.8, 8.6.9, 8.6.11, 8.6.12, 8.7, 8.7.4, 8.8, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.8.6, 8.8.7, 8.8.8, 8.8.9, 8.9, 8.9.1, 8.9.2, 8.9.3, 8.9.4, 8.9.5, 8.9.6, 8.9.7, 8.9.8, 8.9.9, 8.9.11, 8.9.12, 8.9.13, 8.9.14, 8.9.15, 8.9.16, 8.9.17, 8.9.18, 9, 9.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.11, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9, 9.1.11, 9.1.12, 9.2, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5, 9.3, 9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5, 9.3.6, 9.3.7, 9.3.8, 9.3.9, 9.3.11, 9.3.12, 9.3.13, 9.3.14, 9.3.15, 9.3.16, 9.3.17, 9.3.18, 9.4, 9.4.1, 9.4.2, <8.9.18

Type de logiciel: WordPress Plugin

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
10/04/20245.35.2Frédéric Gilles FG Drupal to WordPress Plugin divulgation de l'information$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2024-31247
06/02/20244.34.2FG Drupal Plugin ajax_importer cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.06CVE-2024-24837
16/01/20245.55.4Drupal Structural Element dénie de service$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-22362
28/09/20235.05.0Drupal JSON:API Module divulgation de l'information$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-5256
27/04/20235.05.0Drupal File Download elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-31250
26/04/20234.84.8Drupal Media oEmbed iframe Route cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2022-25276
26/04/20236.76.7Drupal elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-25277
26/04/20235.55.5Drupal Generic Entity Access API elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-25274
26/04/20236.56.5Drupal Form API elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-25273
25/04/20236.46.2Drupal Form API elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-25278
04/01/20235.35.1Drupal Image Module divulgation de l'information$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-25275
17/02/20225.35.3Drupal Quick Edit Module elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-25270
17/02/20225.55.5Drupal Form API elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2022-25271
12/02/20223.53.4Drupal Sanitization API cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-13672
18/09/20213.53.4Drupal QuickEdit Module cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13674
18/09/20213.53.4Drupal Media Module cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13673
18/09/20215.55.3Drupal HTTP API elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-13675
18/09/20214.34.1Drupal QuickEdit divulgation de l'information$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13676
18/09/20217.37.0Drupal JSON API Module elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-13677
11/06/20213.53.5Drupal Form API cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-13663
11/06/20213.53.4Drupal Forms cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13688
05/05/20214.34.1Drupal JSON API elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13665
05/05/20216.36.3Drupal External URL Redirect$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-13662
05/05/20216.36.0Drupal Directory Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-13664
17/12/20209.89.8Drupal Docker Image authentification faible$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-35191

220 plus d'entrées ne sont pas affichées

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!