Drupal

Records942All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical56CVSS 9.0–10.0

CVSS high172CVSS 7.0–8.9

Exploited now

Drupal records in CISA KEV

TI-2026-07979 Drupal Core SQL Injection Vulnerability CRITICAL 100KEV 2026-05-22 TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability CRITICAL 88KEV 2025-01-23 TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25 TI-2018-05494 Drupal Core Remote Code Execution Vulnerability CRITICAL 100KEV 2022-04-13 TI-2019-04505 Drupal Core Remote Code Execution Vulnerability CRITICAL 94KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Drupal 279 records CRITICAL Project Issue Tracking Module 6 records MEDIUM Print 5 records LOW Aggregation Module 4 records MEDIUM Everyblog 4 records LOW Project 4 records MEDIUM Ubercart Module 4 records LOW Content Construction Kit 3 records LOW

Records

4 records in Aggregation Module · all components

TI-2008-02875 CVE-2008-3001 · GHSA-rfg8-m894-j49x

The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload…

MEDIUM 46

The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary e…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03368 Published 2008-07-03 No fix listed CWE-94

TI-2008-02873 CVE-2008-2999 · GHSA-h577-vm6j-5p38

Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for…

LOW 35

Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2008-07-03 No fix listed CWE-89

TI-2008-02874 CVE-2008-3000 · GHSA-x5x8-54j8-pvh6

The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used…

LOW 32

The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01162 Published 2008-07-03 No fix listed CWE-264

TI-2008-02872 CVE-2008-2998 · GHSA-3x4f-24vq-5mhp

Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-07-03 No fix listed CWE-79

Open these records in search →

Critical	56
High	172
Medium	585
Low	110
No CVSS	19