Tag: mlhess@drupal.org

0 Attack Reports | 82 Vulnerabilities

Vulnerabilities

CVE-2024-55636

9.8
    Drupal Core
  • Version(s): 8.0.0 - 10.2.11, 10.3.0 - 10.3.9, 11.0.0 - 11.0.8
Published: December 10, 2024

CVE-2024-55637

9.8
    Drupal Core
  • Version(s): 8.0.0 - 10.2.11, 10.3.0 - 10.3.9, 11.0.0 - 11.0.8
Published: December 10, 2024

CVE-2024-55638

9.8
    Drupal Core
  • Version(s): 7.0 - 7.102, 8.0.0 - 10.2.11, 10.3.0 - 10.3.9
Published: December 10, 2024

CVE-2024-13239

9.8
    Two-factor Authentication (TFA)
  • Version(s): 0.0.0 before 1.5.0
Published: January 9, 2025

CVE-2024-13258

9.8
    Drupal
  • Version(s): 0.0.0 before 2.0.13
Published: January 9, 2025

CVE-2024-13264

9.8
    Drupal Opigno module
  • Version(s): 0.0.0 before 3.1.2
Published: January 9, 2025

CVE-2024-13279

9.8
    Two-factor Authentication (TFA) on Drupal
  • Version(s): 0.0.0 - 1.8.0
Published: January 9, 2025

CVE-2024-13280

9.8
    Drupal Persistent Login
  • Version(s): 0.0.0 - 1.8.0, 2.0.* - 2.2.2
Published: January 9, 2025

CVE-2024-13285

9.8
    wkhtmltopdf
Published: January 9, 2025

CVE-2024-13241

9.1
    Drupal Open Social
  • Version(s): 0.0.0, before 12.0.5
Published: January 9, 2025

CVE-2024-13242

9.1
    Drupal Swift Mailer
  • Version(s): *.*
Published: January 9, 2025

CVE-2024-13253

9.1
    Drupal Advanced PWA inc Push Notifications
  • Version(s): 0.0.0 before 1.5.0
Published: January 9, 2025

CVE-2024-13277

9.1
    Smart IP Ban
  • Version(s): 7.X-1.0 before 7.X-1.1
Published: January 9, 2025

CVE-2024-13278

9.1
    Drupal Diff
  • Version(s): 0.0.0 before 1.8.0
Published: January 9, 2025

CVE-2024-13281

9.1
    Monster Menus
  • Version(s): 0.0.0 before 9.3.2
Published: January 9, 2025

CVE-2024-13244

8.8
    Drupal Migrate Tools
  • Version(s): 0.0.0 before 6.0.3
Published: January 9, 2025

CVE-2024-13250

8.8
    Drupal Symfony Mailer Lite
  • Version(s): 0.0.0 before 1.0.6
Published: January 9, 2025

CVE-2024-13251

8.8
    Drupal Registration role
  • Version(s): 0.0.0 before 2.0.1
Published: January 9, 2025

CVE-2024-13260

8.8
    Drupal Migrate queue importer
  • Version(s): 0.0.0, before 2.1.1
Published: January 9, 2025

CVE-2024-13282

8.8
    Drupal
  • Version(s): 1.0.0 - 1.2.0
Published: January 9, 2025

CVE-2024-13284

8.8
    Gutenberg
  • Version(s): 0.0.0 - 2.13.0, 3.0.0 - 3.0.5
Published: January 9, 2025

CVE-2024-55634

8.1
    Drupal Core
  • Version(s): 8.0.0 - 10.2.11, 10.3.0 - 10.3.9, 11.0.0 - 11.0.8
Published: December 10, 2024

CVE-2024-11941

7.5
    Drupal Core
  • Version(s): 10.2.0 - 10.2.2, 10.1.0 - 10.1.8
Published: December 5, 2024

CVE-2024-13240

7.5
    Drupal Open Social
  • Version(s): 0.0.0 before 12.05
Published: January 9, 2025

CVE-2024-13254

7.5
    Drupal
  • Version(s): 0.0.0 before 3.0.1
Published: January 9, 2025

CVE-2024-13255

7.5
    Drupal RESTful Web Services
  • Version(s): 7.X-2.0 before 7.X-2.10
Published: January 9, 2025

CVE-2024-13256

7.5
    Drupal Email Contact
  • Version(s): 0.0.0 before 2.0.4
Published: January 9, 2025

CVE-2024-13259

7.5
    Drupal Image Sizes
  • Version(s): 0.0.0 before 3.0.2
Published: January 9, 2025

CVE-2024-13265

7.5
    Opigno Learning path
  • Version(s): 0.0.0, before 3.1.2
Published: January 9, 2025

CVE-2024-13267

7.5
    Opigno TinCan Question Type
  • Version(s): 7.X-1.0, 7.X-1.3
Published: January 9, 2025

CVE-2024-13276

7.5
    Drupal File Entity
  • Version(s): 7.X-* before 7.X-2.39
Published: January 9, 2025

CVE-2024-13291

7.3
    Drupal
  • Version(s): 7.X-1.0 before 7.X-1.4
Published: January 9, 2025

CVE-2024-13311

7.3
    Drupal
  • Version(s): Unknown
Published: January 9, 2025

CVE-2024-13268

6.8
    Opigno
  • Version(s): 7.X-1.0 before 7.X-1.23
Published: January 9, 2025

CVE-2024-13295

6.6
    Drupal Node export
  • Version(s): 7.X-* before 7.X-3.3
Published: January 9, 2025

CVE-2024-13296

6.6
    UNKNOWN
  • Version(s): 0.0.0 before 4.0.1
Published: January 9, 2025

CVE-2024-13297

6.6
    Eloqua
  • Version(s): 7.X-* - 7.X-1.14
Published: January 9, 2025

CVE-2024-13299

6.6
    Drupal Megamenu Framework
  • Version(s): UNKNOWN
Published: January 9, 2025

CVE-2024-13300

6.6
    Drupal Print Anything
Published: January 9, 2025

CVE-2024-13243

6.5
    Drupal Entity Delete Log
  • Version(s): 0.0.0, 1.1.1
Published: January 9, 2025

CVE-2024-13310

6.5
    Drupal Git Utilities
  • Version(s): UNKNOWN
Published: January 9, 2025

CVE-2024-13272

6.3
    Drupal
  • Version(s): 0.0.0 - 1.23.0, 2.0.0 - 2.0.2
Published: January 9, 2025

CVE-2024-55635

6.1
    Drupal Core
  • Version(s): 7.0 - 7.101
Published: December 10, 2024

CVE-2024-13283

6.1
    Drupal Facets
  • Version(s): 0.0.0 before 2.0.9
Published: January 9, 2025

CVE-2024-13301

6.1
    OAuth & OpenID Connect Single Sign On - SSO (OAuth/OIDC Client)
  • Version(s): 3.0.0 - 3.44.0, 4.0.0 - 4.0.19
Published: January 9, 2025

CVE-2024-11942

5.9
    Drupal Core
  • Version(s): 10.0.0 before 10.2.10
Published: December 5, 2024

CVE-2024-13248

5.5
    Drupal Private content
  • Version(s): 0.0.0 before 2.1.0
Published: January 9, 2025

CVE-2024-13263

5.5
    Opigno group manager
  • Version(s): 0.0.0 before 3.1.1
Published: January 9, 2025

CVE-2024-12393

5.4
    Drupal Core
  • Version(s): 8.8.0 - 10.2.11, 10.3.0 - 10.3.9, 11.0.0 - 11.0.8
Published: December 10, 2024

CVE-2024-13237

5.4
    Drupal File Entity (fieldable files)
  • Version(s): 7.X-* before 7.X-2.38
Published: January 9, 2025

CVE-2024-13238

5.4
    Drupal Typogrify
  • Version(s): 0.0.0, before 1.3.0
Published: January 9, 2025

CVE-2024-13245

5.4
    Drupal CKEditor 4 LTS - WYSIWYG HTML editor
  • Version(s): 1.0.0, 1.0.1
Published: January 9, 2025

CVE-2024-13249

5.4
    Drupal Node Access Rebuild Progressive
  • Version(s): 7.X-1.0, 7.X-1.1
Published: January 9, 2025

CVE-2024-13252

5.4
    Drupal TacJS
  • Version(s): 0.0.0 before 6.5.0
Published: January 9, 2025

CVE-2024-13273

5.4
    Drupal Open Social
  • Version(s): 0.0.0 - 12.3.8, 12.4.0 - 12.4.5, 13.0.0 - 13.0.0-alpha11
Published: January 9, 2025

CVE-2024-13286

5.4
    Drupal SVG Embed
  • Version(s): 0.0.0, 2.1.2
Published: January 9, 2025

CVE-2024-13287

5.4
    Drupal Views SVG Animation
  • Version(s): 0.0.0 before 1.0.1
Published: January 9, 2025

CVE-2024-13289

5.4
    Drupal Cookiebot + GTM
  • Version(s): 0.0.0 before 1.0.18
Published: January 9, 2025

CVE-2024-13294

5.4
    Drupal POST File
  • Version(s): 0.0.0 before 1.0.2
Published: January 9, 2025

CVE-2024-13309

5.4
    Drupal Login Disable
  • Version(s): 2.0.0, 2.0.1, 2.1.0
Published: January 9, 2025

CVE-2024-13246

5.3
    Drupal Node Access Rebuild Progressive
  • Version(s): 0.0.0 before 2.0.2
Published: January 9, 2025

CVE-2024-13257

5.3
    Drupal Commerce View Receipt
  • Version(s): 0.0.0 before 1.0.3
Published: January 9, 2025

CVE-2024-13266

5.3
    Drupal Responsive and off-canvas menu
  • Version(s): 0.0.0 before 4.4.4
Published: January 9, 2025

CVE-2024-13269

5.3
    Drupal Advanced Varnish
  • Version(s): 0.0.0 before 4.0.11
Published: January 9, 2025

CVE-2024-13274

5.3
    Drupal Open Social
  • Version(s): 0.0.0 - 12.3.8, 12.4.0 - 12.4.5
Published: January 9, 2025

CVE-2024-13275

5.3
    Drupal Security Kit
  • Version(s): 0.0.0 before 2.0.3
Published: January 9, 2025

CVE-2024-13290

5.3
    OhDear Integration for Drupal
  • Version(s): 0.0.0 before 2.0.4
Published: January 9, 2025

CVE-2024-13302

5.3
    Drupal Pages Restriction Access
  • Version(s): 2.0.0 - 2.0.3
Published: January 9, 2025

CVE-2024-13303

5.3
    Drupal Download All Files
  • Version(s): 0.0.0, before 2.0.2
Published: January 9, 2025

CVE-2024-13312

5.3
    Open Social
  • Version(s): 11.8.0 - 12.3.10, 12.4.0 - 12.4.9
Published: January 9, 2025

CVE-2024-13247

4.8
    Drupal Coffee
  • Version(s): 0.0.0 before 1.4.0
Published: January 9, 2025

CVE-2024-13262

4.8
    Drupal View Password
  • Version(s): 0.0.0, 6.0.4
Published: January 9, 2025

CVE-2024-13292

4.8
    Tooltip
  • Version(s): 0.0.0 before 1.1.2
Published: January 9, 2025

CVE-2024-13298

4.8
    Drupal Tarte au Citron
  • Version(s): 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4
Published: January 9, 2025

CVE-2024-13305

4.8
    Drupal Entity Form Steps
  • Version(s): 0.0.0 before 1.1.4
Published: January 9, 2025

CVE-2024-13304

4.5
    Drupal Minify JS
  • Version(s): 0.0.0 - 3.0.2
Published: January 9, 2025

CVE-2024-13270

4.3
    Drupal Freelinking
  • Version(s): 0.0.0 - 4.0.1
Published: January 9, 2025

CVE-2024-13271

4.3
    Drupal Content Entity Clone
  • Version(s): 0.0.0 before 1.0.4
Published: January 9, 2025

CVE-2024-13288

4.3
    Monster Menus
  • Version(s): 0.0.0 - 9.3.4, 9.4.0 - 9.4.2
Published: January 9, 2025

CVE-2024-13308

3.8
    Browser Back Button
  • Version(s): 1.0.0, 2.0.2
Published: January 9, 2025

CVE-2024-13261

3.5
    Acquia DAM
  • Version(s): 0.0.0 - 1.0.13, 1.1.0 - 1.1.0-beta3
Published: January 9, 2025

CVE-2024-13293

3.1
    Drupal POST File
  • Version(s): 0.0.0 before 1.0.2
Published: January 9, 2025
Click here to see more Vulnerabilities