Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0…EPSS 0.2%Mar 25, 2026
- UnknownDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-008EPSS 0.3%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Defacement - SA-CORE-2025-007EPSS 0.2%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2025-006EPSS 0.3%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-005EPSS 0.3%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004EPSS 0.5%Mar 19, 2025
- UnknownDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003EPSS 0.6%Feb 19, 2025
- UnknownDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002EPSS 0.3%Feb 19, 2025
- UnknownDrupal core - Critical - Cross site scripting - SA-CORE-2025-001EPSS 0.3%Feb 19, 2025
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-008EPSS 1.0%Nov 20, 2024
- High7.5PEAR Archive_Tar Improper Link Resolution VulnerabilityKEVEPSS 70.6%Jan 18, 2021
- High8.8Drupal core Un-restricted Upload of FileKEVEPSS 35.4%Nov 20, 2020
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.6%Nov 19, 2020
- Medium6.1JQuery Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 84.9%Apr 29, 2020
- High8.1Drupal Core Remote Code Execution VulnerabilityKEVEPSS 92.0%Feb 21, 2019
- Critical9.8Drupal Core Remote Code Execution VulnerabilityKEVEPSS 99.2%Jul 19, 2018
- Critical9.8Drupal Core Remote Code Execution VulnerabilityKEVEPSS 100.0%Mar 29, 2018
67 records · page 3 of 3
PreviousNext