Drupal

Drupal

284 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.6

CVE-2025-31673

  • EPSS 0.29%
  • Veröffentlicht 31.03.2025 22:15:19
  • Zuletzt bearbeitet 02.06.2025 16:25:04

Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.

7.5

CVE-2025-31674

  • EPSS 0.55%
  • Veröffentlicht 31.03.2025 22:15:19
  • Zuletzt bearbeitet 01.05.2025 14:35:58

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.1...

5.4

CVE-2024-12393

  • EPSS 0.33%
  • Veröffentlicht 10.12.2024 00:15:22
  • Zuletzt bearbeitet 02.06.2025 16:21:01

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0...

8.1

CVE-2024-55634

  • EPSS 0.41%
  • Veröffentlicht 10.12.2024 00:15:22
  • Zuletzt bearbeitet 02.06.2025 16:21:42

A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

6.1

CVE-2024-55635

  • EPSS 0.31%
  • Veröffentlicht 10.12.2024 00:15:22
  • Zuletzt bearbeitet 02.06.2025 16:22:31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.

9.8

CVE-2024-55636

  • EPSS 0.9%
  • Veröffentlicht 10.12.2024 00:15:22
  • Zuletzt bearbeitet 02.06.2025 16:23:09

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is e...

9.8

CVE-2024-55637

  • EPSS 0.8%
  • Veröffentlicht 10.12.2024 00:15:22
  • Zuletzt bearbeitet 02.06.2025 16:23:28

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is e...

9.8

CVE-2024-55638

  • EPSS 0.96%
  • Veröffentlicht 10.12.2024 00:15:22
  • Zuletzt bearbeitet 02.06.2025 16:23:56

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9. Drupal core contains a chain of methods that is explo...

7.5

CVE-2024-11941

  • EPSS 0.46%
  • Veröffentlicht 05.12.2024 15:15:08
  • Zuletzt bearbeitet 02.06.2025 16:18:43

A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8.

5.9

CVE-2024-11942

  • EPSS 0.38%
  • Veröffentlicht 05.12.2024 15:15:08
  • Zuletzt bearbeitet 02.06.2025 16:20:21

A vulnerability in Drupal Core allows File Manipulation.This issue affects Drupal Core: from 10.0.0 before 10.2.10.