drupal7

6 results · Clear filters · Feed

• High 7.5
  CVE-2020-36193 Exploited EPSS 71%

  Directory Traversal in Archive_Tar

  Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

  drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist
  Jan 18, 2021

  KEV Aug 25, 2022
• High 8.8
  CVE-2020-13671 Exploited Public exploit EPSS 36%

  Drupal core Unrestricted Upload of File with Dangerous Type

  Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupa…

  Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist
  Nov 20, 2020

  KEV Jan 18, 2022
• High 7.8
  CVE-2020-28949 Exploited Public exploit EPSS 85%

  Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…

  drupal7 drupal7 php-pear php-pear Debian Ubuntu Alpine
  Nov 19, 2020

  KEV Aug 25, 2022
• Medium 6.9
  CVE-2020-11023 Exploited Public exploit EPSS 85%

  Potential XSS vulnerability in jQuery

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

  jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
  Apr 29, 2020

  KEV Jan 23, 2025
• High 8.1
  CVE-2018-7602 Exploited · Ransomware Public exploit EPSS 99%

  Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

  A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is relat…

  Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist
  Jul 19, 2018

  KEV Apr 13, 2022
• Critical 9.8
  CVE-2018-7600 Exploited · Ransomware Public exploit EPSS 100%

  Drupal Core Remote Code Execution Vulnerability

  Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

  drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist
  Mar 29, 2018

  KEV Nov 3, 2021