Tag: mlhess@drupal.org

0 Attack Reports | 130 Vulnerabilities

Vulnerabilities

CVE-2024-55636

9.8
    Drupal Core
Published: December 10, 2024

CVE-2024-55637

9.8
    Drupal Core
Published: December 10, 2024

CVE-2024-55638

9.8
    Drupal Core
Published: December 10, 2024

CVE-2024-13239

9.8
    Two-factor Authentication (TFA)
Published: January 9, 2025

CVE-2024-13258

9.8
    Drupal
Published: January 9, 2025

CVE-2024-13264

9.8
    Drupal Opigno module
Published: January 9, 2025

CVE-2024-13279

9.8
    Two-factor Authentication (TFA) on Drupal
Published: January 9, 2025

CVE-2024-13280

9.8
    Drupal Persistent Login
Published: January 9, 2025

CVE-2024-13285

9.8
    wkhtmltopdf
Published: January 9, 2025

CVE-2024-13241

9.1
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13242

9.1
    Drupal Swift Mailer
Published: January 9, 2025

CVE-2024-13253

9.1
    Drupal Advanced PWA inc Push Notifications
Published: January 9, 2025

CVE-2024-13277

9.1
    Smart IP Ban
Published: January 9, 2025

CVE-2024-13278

9.1
    Drupal Diff
Published: January 9, 2025

CVE-2024-13281

9.1
    Monster Menus
Published: January 9, 2025

CVE-2024-13244

8.8
    Drupal Migrate Tools
Published: January 9, 2025

CVE-2024-13250

8.8
    Drupal Symfony Mailer Lite
Published: January 9, 2025

CVE-2024-13251

8.8
    Drupal Registration role
Published: January 9, 2025

CVE-2024-13260

8.8
    Drupal Migrate queue importer
Published: January 9, 2025

CVE-2024-13282

8.8
    Drupal
Published: January 9, 2025

CVE-2024-13284

8.8
    Gutenberg
Published: January 9, 2025

CVE-2024-55634

8.1
    Drupal Core
Published: December 10, 2024

CVE-2024-11941

7.5
    Drupal Core
Published: December 5, 2024

CVE-2024-13240

7.5
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13254

7.5
    Drupal
Published: January 9, 2025

CVE-2024-13255

7.5
    Drupal RESTful Web Services
Published: January 9, 2025

CVE-2024-13256

7.5
    Drupal Email Contact
Published: January 9, 2025

CVE-2024-13259

7.5
    Drupal Image Sizes
Published: January 9, 2025

CVE-2024-13265

7.5
    Opigno Learning path
Published: January 9, 2025

CVE-2024-13267

7.5
    Opigno TinCan Question Type
Published: January 9, 2025

CVE-2024-13276

7.5
    Drupal File Entity
Published: January 9, 2025

CVE-2024-13291

7.3
    Drupal
Published: January 9, 2025

CVE-2024-13311

7.3
    Drupal
Published: January 9, 2025

CVE-2025-3903

7.3
    Drupal
  • Ueditor Baidu Editor
Published: April 23, 2025

CVE-2025-3904

7.3
    Drupal
  • Sportsleague
Published: April 23, 2025

CVE-2024-13268

6.8
    Opigno
Published: January 9, 2025

CVE-2024-13295

6.6
    Drupal Node export
Published: January 9, 2025

CVE-2024-13296

6.6
    UNKNOWN
Published: January 9, 2025

CVE-2024-13297

6.6
    Eloqua
Published: January 9, 2025

CVE-2024-13299

6.6
    Drupal Megamenu Framework
Published: January 9, 2025

CVE-2024-13300

6.6
    Drupal Print Anything
Published: January 9, 2025

CVE-2025-3062

6.6
    Drupal
  • Admin Lte
Published: March 31, 2025

CVE-2024-13243

6.5
    Drupal Entity Delete Log
Published: January 9, 2025

CVE-2024-13310

6.5
    Drupal Git Utilities
Published: January 9, 2025

CVE-2025-3474

6.5
    panels
Published: April 9, 2025

CVE-2025-3475

6.5
    web-t
Published: April 9, 2025

CVE-2025-3733

6.5
    Drupal
  • Baguettebox.Js
Published: April 16, 2025

CVE-2024-13272

6.3
    Drupal
Published: January 9, 2025

CVE-2024-55635

6.1
    Drupal Core
Published: December 10, 2024

CVE-2024-13283

6.1
    Drupal Facets
Published: January 9, 2025

CVE-2024-13301

6.1
    OAuth & OpenID Connect Single Sign On - SSO (OAuth/OIDC Client)
Published: January 9, 2025

CVE-2025-3057

6.1
    Drupal
  • Drupal
Published: March 31, 2025

CVE-2025-3900

6.1
    Drupal
  • Colorbox
Published: April 23, 2025

CVE-2025-3901

6.1
    Drupal
  • Bootstrap Site Alert
Published: April 23, 2025

CVE-2025-3902

6.1
    Drupal
  • Drupal
Published: April 23, 2025

CVE-2024-11942

5.9
    Drupal Core
Published: December 5, 2024

CVE-2025-3734

5.9
    Drupal
  • Stage File Proxy
Published: April 16, 2025

CVE-2025-3739

5.9
    Drupal
  • Google Optimize Hide Page
Published: April 16, 2025

CVE-2024-13248

5.5
    Drupal Private content
Published: January 9, 2025

CVE-2024-13263

5.5
    Opigno group manager
Published: January 9, 2025

CVE-2024-12393

5.4
    Drupal Core
Published: December 10, 2024

CVE-2024-13237

5.4
    Drupal File Entity (fieldable files)
Published: January 9, 2025

CVE-2024-13238

5.4
    Drupal Typogrify
Published: January 9, 2025

CVE-2024-13245

5.4
    Drupal CKEditor 4 LTS - WYSIWYG HTML editor
Published: January 9, 2025

CVE-2024-13249

5.4
    Drupal Node Access Rebuild Progressive
Published: January 9, 2025

CVE-2024-13252

5.4
    Drupal TacJS
Published: January 9, 2025

CVE-2024-13273

5.4
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13286

5.4
    Drupal SVG Embed
Published: January 9, 2025

CVE-2024-13287

5.4
    Drupal Views SVG Animation
Published: January 9, 2025

CVE-2024-13289

5.4
    Drupal Cookiebot + GTM
Published: January 9, 2025

CVE-2024-13294

5.4
    Drupal POST File
Published: January 9, 2025

CVE-2024-13309

5.4
    Drupal Login Disable
Published: January 9, 2025

CVE-2025-3131

5.4
    eca_event_condition_action
    eca_event_condition_action
    eca_event_condition_action
    eca_event_condition_action
Published: April 9, 2025

CVE-2024-13246

5.3
    Drupal Node Access Rebuild Progressive
Published: January 9, 2025

CVE-2024-13257

5.3
    Drupal Commerce View Receipt
Published: January 9, 2025

CVE-2024-13266

5.3
    Drupal Responsive and off-canvas menu
Published: January 9, 2025

CVE-2024-13269

5.3
    Drupal Advanced Varnish
Published: January 9, 2025

CVE-2024-13274

5.3
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13275

5.3
    Drupal Security Kit
Published: January 9, 2025

CVE-2024-13290

5.3
    OhDear Integration for Drupal
Published: January 9, 2025

CVE-2024-13302

5.3
    Drupal Pages Restriction Access
Published: January 9, 2025

CVE-2024-13303

5.3
    Drupal Download All Files
Published: January 9, 2025

CVE-2024-13312

5.3
    Open Social
Published: January 9, 2025

CVE-2024-13247

4.8
    Drupal Coffee
Published: January 9, 2025

CVE-2024-13262

4.8
    Drupal View Password
Published: January 9, 2025

CVE-2024-13292

4.8
    Tooltip
Published: January 9, 2025

CVE-2024-13298

4.8
    Drupal Tarte au Citron
Published: January 9, 2025

CVE-2024-13305

4.8
    Drupal Entity Form Steps
Published: January 9, 2025

CVE-2024-13304

4.5
    Drupal Minify JS
Published: January 9, 2025

CVE-2024-13270

4.3
    Drupal Freelinking
Published: January 9, 2025

CVE-2024-13271

4.3
    Drupal Content Entity Clone
Published: January 9, 2025

CVE-2024-13288

4.3
    Monster Menus
Published: January 9, 2025

CVE-2025-3907

4.3
    Drupal
  • Search Api Solr
Published: April 23, 2025

CVE-2024-13308

3.8
    Browser Back Button
Published: January 9, 2025

CVE-2024-13261

3.5
    Acquia DAM
Published: January 9, 2025

CVE-2024-13293

3.1
    Drupal POST File
Published: January 9, 2025

CVE-2025-31673

None
    Drupal
  • Drupal Core
Published: March 31, 2025

CVE-2025-31674

None
    Drupal
  • Drupal
Published: March 31, 2025

CVE-2025-31675

None
    Drupal
  • Drupal Core
Published: March 31, 2025

CVE-2025-31676

None
    Drupal
  • Email Tfa
Published: March 31, 2025

CVE-2025-31677

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31678

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31679

None
    Drupal
  • Ignition Error Pages
Published: March 31, 2025

CVE-2025-31680

None
    Matomo
  • Analytics
Published: March 31, 2025

CVE-2025-31681

None
    Drupal
  • Authenticator Login
Published: March 31, 2025

CVE-2025-31682

None
    Drupal
  • Google Tag
Published: March 31, 2025

CVE-2025-31683

None
    Drupal
  • Google Tag
Published: March 31, 2025

CVE-2025-31684

None
    Drupal
  • Oauth2 Client
Published: March 31, 2025

CVE-2025-31685

None
    Drupal
  • Open Social
Published: March 31, 2025

CVE-2025-31686

None
    Drupal
  • Open Social
Published: March 31, 2025

CVE-2025-31687

None
    Drupal
  • Spamspan Filter
Published: March 31, 2025

CVE-2025-31688

None
    Drupal
  • Configuration Split
Published: March 31, 2025

CVE-2025-31689

None
    Drupal
  • General Data Protection Regulation
Published: March 31, 2025

CVE-2025-31690

None
    Drupal
  • Cache Utility
Published: March 31, 2025

CVE-2025-31691

None
    Drupal
  • Oauth2 Server
Published: March 31, 2025

CVE-2025-31692

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31693

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31694

None
    Drupal
  • Two Factor Authentication
Published: March 31, 2025

CVE-2025-31695

None
    Drupal
  • Link Field Display Mode Formatter
Published: March 31, 2025

CVE-2025-31696

None
    Drupal
  • Rapi Doc Oas Field Formatter
Published: March 31, 2025

CVE-2025-31697

None
    Drupal
  • Formatter Suite
Published: March 31, 2025

CVE-2025-3059

None
    Drupal
  • Profile Private
Published: March 31, 2025

CVE-2025-3060

None
    Drupal
  • Flattern
Published: March 31, 2025

CVE-2025-3061

None
    Drupal
  • Material Admin
Published: March 31, 2025

CVE-2025-3129

None
    Drupal
  • Access Code
Published: April 2, 2025

CVE-2025-3130

None
    Drupal
  • Obfuscate
Published: April 2, 2025

CVE-2025-3735

None
    Drupal
  • Panelizer
Published: April 16, 2025

CVE-2025-3736

None
    Drupal
  • Simple Gtm
Published: April 16, 2025

CVE-2025-3737

None
    Drupal
  • Google Maps Store Locator
Published: April 16, 2025

CVE-2025-3738

None
    Drupal
  • Google Optimize
Published: April 16, 2025
Click here to see more Vulnerabilities