Drupal Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

7.065
7.163
7.263
7.1062
6.062

Contromisure

Official Fix213
Temporary Fix0
Workaround2
Unavailable2
Not Defined28

Sfruttabilità

High22
Functional0
Proof-of-Concept44
Unproven16
Not Defined163

Accesso al vettore

Not Defined0
Physical0
Local4
Adjacent9
Network232

Autenticazione

Not Defined0
High2
Low83
None160

Interazione dell'utente

Not Defined0
Required115
None130

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤30
≤427
≤571
≤659
≤738
≤836
≤910
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤442
≤578
≤660
≤741
≤815
≤97
≤102

VulDB

≤10
≤20
≤32
≤429
≤572
≤654
≤735
≤840
≤99
≤104

NVD

≤10
≤20
≤30
≤40
≤55
≤67
≤717
≤814
≤99
≤105

CNA

≤13
≤20
≤30
≤40
≤51
≤61
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k42
<2k111
<5k92
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k241
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (495): 1.0, 1.7, 1.53, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, 3.24, 3.25, 3.26, 3.27, 3.28, 3.29, 3.30, 3.31, 3.32, 3.33, 3.34, 3.35, 3.36, 3.37, 3.38, 3.39, 3.40, 3.41, 3.42, 3.43, 3.44, 3.45, 3.46, 3.47, 3.48, 3.49, 3.50, 3.51, 3.52, 3.53, 3.54, 3.55, 3.56, 3.57, 3.58, 3.59, 3.60, 3.61, 3.62, 3.63, 3.64, 3.65, 3.66, 3.67, 3.70.1, 3.70.2, 3.70.3, 4, 4.0, 4.1, 4.2, 4.2.0 Rc, 4.3, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.11, 4.7, 4.7 Rev1.15, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 4.7.8, 4.7.x-1, 4.7.x-1.1, 4.7.x-1.2, 4.7_2, 4.7_2.1, 5, 5.0, 5.1, 5.1 Rev1.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.7, 5.8, 5.9, 5.10, 5.11, 5.12, 5.13, 5.14, 5.15, 5.16, 5.17, 5.18, 5.19, 5.20, 5.21, 5.22, 5.23, 5.x-1, 5.x-1.1, 5.x-1.2, 5.x-1.3, 5.x-1.4, 5.x-1.5, 5.x-1.6, 5.x-1.7, 5.x-1.8, 5.x-1.9, 6, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 6.11, 6.12, 6.13, 6.14, 6.15, 6.16, 6.17, 6.18, 6.19, 6.20, 6.21, 6.22, 6.23, 6.24, 6.25, 6.26, 6.27, 6.28, 6.29, 6.30, 6.31, 6.32, 6.33, 6.34, 6.35, 6.36, 6.37, 6.x-, 6.x-0.1, 6.x-0.2, 6.x-0.3, 6.x-0.4, 6.x-0.5, 6.x-0.6, 6.x-0.7, 6.x-0.8, 6.x-0.9, 6.x-0.11, 6.x-0.12, 6.x-1, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.4, 6.x-1.5, 6.x-1.6, 6.x-1.7, 6.x-1.8, 6.x-1.9, 6.x-1.11, 6.x-1.12, 6.x-1.13, 6.x-1.14, 6.x-1.15, 6.x-1.16, 6.x-1.17, 6.x-1.18, 6.x-1.19, 6.x-3, 6.x-3.1, 6.x-3.2, 6.x-3.3, 6.x-3.4, 6.x-3.18, 7.0, 7.0-dev, 7.01, 7.02, 7.03, 7.04, 7.05, 7.06, 7.07, 7.08, 7.09, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.14, 7.15, 7.16, 7.17, 7.18, 7.19, 7.20, 7.21, 7.22, 7.23, 7.24, 7.25, 7.26, 7.27, 7.28, 7.29, 7.30, 7.31, 7.32, 7.33, 7.34, 7.35, 7.36, 7.37, 7.38, 7.39, 7.40, 7.41, 7.42, 7.43, 7.44, 7.45, 7.46, 7.47, 7.48, 7.49, 7.50, 7.51, 7.52, 7.53, 7.54, 7.55, 7.56, 7.57, 7.58, 7.59, 7.60, 7.61, 7.62, 7.63, 7.64, 7.65, 7.66, 7.67, 7.68, 7.69, 7.70, 7.71, 7.72, 7.73, 7.74, 7.75, 7.76, 7.77, 7.78, 7.79, 7.80, 7.81, 7.82, 7.83, 7.84, 7.85, 7.86, 7.87, 7.88, 7.89, 7.90, 7.x-1, 7.x-1.1, 7.x-1.2, 7.x-1.3, 7.x-2, 7.x-3, 7.x-3.1, 7.x-3.2, 7.x-3.3, 7.x-3.4, 7.x-3.5, 7.x-3.6, 7.x-3.7, 7.x-3.8, 7.x-3.9, 7.x-3.11, 7.x-3.12, 7.x-3.13, 8, 8.0, 8.0.1, 8.0.2, 8.0.3, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.2, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.3, 8.3.1, 8.3.2, 8.3.3, 8.3.4, 8.3.5, 8.3.6, 8.3.7, 8.3.8, 8.4, 8.4.1, 8.4.2, 8.4.3, 8.4.4, 8.4.5, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.6, 8.6.1, 8.6.2, 8.6.3, 8.6.4, 8.6.5, 8.6.6, 8.6.7, 8.6.8, 8.6.9, 8.6.11, 8.6.12, 8.7, 8.7.4, 8.8, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.8.6, 8.8.7, 8.8.8, 8.8.9, 8.9, 8.9.1, 8.9.2, 8.9.3, 8.9.4, 8.9.5, 8.9.6, 8.9.7, 8.9.8, 8.9.9, 8.9.11, 8.9.12, 8.9.13, 8.9.14, 8.9.15, 8.9.16, 8.9.17, 8.9.18, 9, 9.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.11, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9, 9.1.11, 9.1.12, 9.2, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5, 9.3, 9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5, 9.3.6, 9.3.7, 9.3.8, 9.3.9, 9.3.11, 9.3.12, 9.3.13, 9.3.14, 9.3.15, 9.3.16, 9.3.17, 9.3.18, 9.4, 9.4.1, 9.4.2, <8.9.18

Tipo di software: WordPress Plugin

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
10/04/20245.35.2Frédéric Gilles FG Drupal to WordPress Plugin rivelazione di un 'informazione$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2024-31247
06/02/20244.34.2FG Drupal Plugin ajax_importer cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.06CVE-2024-24837
16/01/20245.55.4Drupal Structural Element denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-22362
28/09/20235.05.0Drupal JSON:API Module rivelazione di un 'informazione$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-5256
27/04/20235.05.0Drupal File Download escalazione di privilegi$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-31250
26/04/20234.84.8Drupal Media oEmbed iframe Route cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2022-25276
26/04/20236.76.7Drupal escalazione di privilegi$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-25277
26/04/20235.55.5Drupal Generic Entity Access API escalazione di privilegi$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-25274
26/04/20236.56.5Drupal Form API escalazione di privilegi$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-25273
25/04/20236.46.2Drupal Form API escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-25278
04/01/20235.35.1Drupal Image Module rivelazione di un 'informazione$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-25275
17/02/20225.35.3Drupal Quick Edit Module escalazione di privilegi$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-25270
17/02/20225.55.5Drupal Form API escalazione di privilegi$0-$5k$0-$5kNot DefinedNot Defined0.06CVE-2022-25271
12/02/20223.53.4Drupal Sanitization API cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-13672
18/09/20213.53.4Drupal QuickEdit Module cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13674
18/09/20213.53.4Drupal Media Module cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13673
18/09/20215.55.3Drupal HTTP API escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-13675
18/09/20214.34.1Drupal QuickEdit rivelazione di un 'informazione$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13676
18/09/20217.37.0Drupal JSON API Module escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-13677
11/06/20213.53.5Drupal Form API cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-13663
11/06/20213.53.4Drupal Forms cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13688
05/05/20214.34.1Drupal JSON API escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13665
05/05/20216.36.3Drupal External URL Redirect$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-13662
05/05/20216.36.0Drupal Directory Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-13664
17/12/20209.89.8Drupal Docker Image autenticazione debole$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-35191

220 non vengono visualizzate più voci

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!