DR
CMS
Drupal
On CISA KEVExploited in the wildRansomware-linked
680
CVEs
8
On KEV
9.8
Max CVSS
72
New 30D
Severity mix
Critical 44High 108Medium 347Low 1
Watch
Add Drupal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-13671 In wildKEV | 8.8 | Nov 20 | Drupal core Un-restricted Upload of File Affected: 9.0 versions prior to 9.0.8; 8.9 versions prior to 8.9.9; 8.8 versions prior to 8.8.11; 7 versions prior to 7.74 |
| CVE-2019-6340 In wildKEV | 8.1 | Feb 21 | Drupal core - Highly critical - Remote Code Execution Affected: 8.5 before 8.5.11; 8.6 before 8.6.10 |
| CVE-2020-28949 In wildKEV | 7.8 | Nov 19 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Affected: 7.0 before 7.75; 8.0.0 before 8.9.10; 8.8.0 before 8.8.12; 9.0.0 before 9.0.9 |
| CVE-2020-36193 In wildKEV | 7.5 | Jan 18 | PEAR Archive_Tar Improper Link Resolution Vulnerability Affected: 7.0 before 7.78; 8.9.0 before 8.9.13; 9.0.0 before 9.0.11; 9.1.0 before 9.1.3 |
Showing 4
The 500 most important CVEs for this product (exploited first, then by severity)