Vulnerability Name CVE Severity
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-6660) CVE-2015-6660
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6379) CVE-2017-6379
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13663) CVE-2020-13663
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13674) CVE-2020-13674
Drupal Cryptographic Issues Vulnerability (CVE-2013-6386) CVE-2013-6386
Drupal CVE-2007-0626 Vulnerability (CVE-2007-0626) CVE-2007-0626
Drupal CVE-2008-1729 Vulnerability (CVE-2008-1729) CVE-2008-1729
Drupal CVE-2008-4793 Vulnerability (CVE-2008-4793) CVE-2008-4793
Drupal CVE-2009-1576 Vulnerability (CVE-2009-1576) CVE-2009-1576
Drupal CVE-2009-3352 Vulnerability (CVE-2009-3352) CVE-2009-3352
Drupal CVE-2014-1475 Vulnerability (CVE-2014-1475) CVE-2014-1475
Drupal CVE-2014-9016 Vulnerability (CVE-2014-9016) CVE-2014-9016
Drupal CVE-2017-6919 Vulnerability (CVE-2017-6919) CVE-2017-6919
Drupal CVE-2017-6925 Vulnerability (CVE-2017-6925) CVE-2017-6925
Drupal CVE-2017-6930 Vulnerability (CVE-2017-6930) CVE-2017-6930
Drupal CVE-2018-7602 Vulnerability (CVE-2018-7602) CVE-2018-7602
Drupal CVE-2018-14773 Vulnerability (CVE-2018-14773) CVE-2018-14773
Drupal CVE-2020-13665 Vulnerability (CVE-2020-13665) CVE-2020-13665
Drupal CVE-2022-25278 Vulnerability (CVE-2022-25278) CVE-2022-25278
Drupal Data Processing Errors Vulnerability (CVE-2016-3171) CVE-2016-3171
Drupal Data Processing Errors Vulnerability (CVE-2017-6920) CVE-2017-6920
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6338) CVE-2019-6338
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6340) CVE-2019-6340
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2020-28948) CVE-2020-28948
Drupal Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-13670) CVE-2020-13670
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3730) CVE-2011-3730
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0825) CVE-2012-0825
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2922) CVE-2012-2922
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5652) CVE-2012-5652
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-2983) CVE-2014-2983
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3231) CVE-2015-3231
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6661) CVE-2015-6661
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3170) CVE-2016-3170
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6212) CVE-2016-6212
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9449) CVE-2016-9449
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6926) CVE-2017-6926
Drupal Files or Directories Accessible to External Parties Vulnerability (CVE-2017-6922) CVE-2017-6922
Drupal Improper Access Control Vulnerability (CVE-2015-2559) CVE-2015-2559
Drupal Improper Access Control Vulnerability (CVE-2016-3162) CVE-2016-3162
Drupal Improper Access Control Vulnerability (CVE-2016-3165) CVE-2016-3165
Drupal Improper Access Control Vulnerability (CVE-2016-5385) CVE-2016-5385
Drupal Improper Access Control Vulnerability (CVE-2020-13677) CVE-2020-13677
Drupal Improper Authentication Vulnerability (CVE-2006-1228) CVE-2006-1228
Drupal Improper Authentication Vulnerability (CVE-2010-3091) CVE-2010-3091
Drupal Improper Authentication Vulnerability (CVE-2010-3685) CVE-2010-3685
Drupal Improper Authentication Vulnerability (CVE-2010-3686) CVE-2010-3686
Drupal Improper Authentication Vulnerability (CVE-2019-10911) CVE-2019-10911
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-1921) CVE-2005-1921
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5593) CVE-2007-5593
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-2372) CVE-2009-2372
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-6385) CVE-2013-6385
Drupal Improper Input Validation Vulnerability (CVE-2007-6299) CVE-2007-6299
Drupal Improper Input Validation Vulnerability (CVE-2010-2473) CVE-2010-2473
Drupal Improper Input Validation Vulnerability (CVE-2012-1589) CVE-2012-1589
Drupal Improper Input Validation Vulnerability (CVE-2012-5653) CVE-2012-5653
Drupal Improper Input Validation Vulnerability (CVE-2013-6389) CVE-2013-6389
Drupal Improper Input Validation Vulnerability (CVE-2014-5019) CVE-2014-5019
Drupal Improper Input Validation Vulnerability (CVE-2015-3234) CVE-2015-3234
Drupal Improper Input Validation Vulnerability (CVE-2016-9452) CVE-2016-9452
Drupal Improper Input Validation Vulnerability (CVE-2017-6921) CVE-2017-6921
Drupal Improper Input Validation Vulnerability (CVE-2018-7600) CVE-2018-7600
Drupal Improper Input Validation Vulnerability (CVE-2019-6339) CVE-2019-6339
Drupal Improper Input Validation Vulnerability (CVE-2019-6342) CVE-2019-6342
Drupal Improper Input Validation Vulnerability (CVE-2022-24775) CVE-2022-24775
Drupal Improper Input Validation Vulnerability (CVE-2022-25271) CVE-2022-25271
Drupal Improper Input Validation Vulnerability (CVE-2022-25273) CVE-2022-25273
Drupal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-11831) CVE-2019-11831
Drupal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-36193) CVE-2020-36193
Drupal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-39261) CVE-2022-39261
Drupal Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2019-11358) CVE-2019-11358
Drupal Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2007-5595) CVE-2007-5595
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-0136) CVE-2007-0136
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-4064) CVE-2007-4064
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5596) CVE-2007-5596
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5621) CVE-2007-5621