Skip to content
OpenAdvisories

Package · Ubuntu

drupal7

79 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-6339 Public exploit EPSS 36%

    PHAR stream wrapper Arbitrary PHP code execution

    In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code (core, c…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2018-7600 Exploited · Ransomware Public exploit EPSS 100%

    Drupal Core Remote Code Execution Vulnerability

    Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

    drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist
    KEV Nov 3, 2021