Drupal

Records942All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical56CVSS 9.0–10.0

CVSS high172CVSS 7.0–8.9

Exploited now

Drupal records in CISA KEV

TI-2026-07979 Drupal Core SQL Injection Vulnerability CRITICAL 100KEV 2026-05-22 TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability CRITICAL 88KEV 2025-01-23 TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25 TI-2018-05494 Drupal Core Remote Code Execution Vulnerability CRITICAL 100KEV 2022-04-13 TI-2019-04505 Drupal Core Remote Code Execution Vulnerability CRITICAL 94KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Drupal 279 records CRITICAL Project Issue Tracking Module 6 records MEDIUM Print 5 records LOW Aggregation Module 4 records MEDIUM Everyblog 4 records LOW Project 4 records MEDIUM Ubercart Module 4 records LOW Content Construction Kit 3 records LOW

Records

4 records in Project · all components

TI-2007-00492 CVE-2007-0505 · GHSA-cpv9-xx7r-4mjp

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x…

MEDIUM 42

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.02854 Published 2007-01-26 No fix listed

TI-2007-00493 CVE-2007-0506 · GHSA-cgjv-226f-h6vj

The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before…

LOW 29

The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by gu…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01165 Published 2007-01-26 No fix listed

TI-2007-04296 CVE-2007-4436 · GHSA-5j7j-rv74-pjjv

The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue…

LOW 25

The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to (1) obta…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01284 Published 2007-08-20 No fix listed CWE-264

TI-2007-00521 CVE-2007-0534 · GHSA-6xv3-cvq6-fjmw

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules for Drupal allow remote authenticated user…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01272 Published 2007-01-26 No fix listed

Open these records in search →

Critical	56
High	172
Medium	585
Low	110
No CVSS	19