| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
Drupal Improper Removal of Sensitive Information Before Storage or Transfer Vulnerability (CVE-2022-31043)
|
|
|
Medium
|
|
Drupal Incorrect Authorization Vulnerability (CVE-2020-13676)
|
|
|
Medium
|
|
Drupal Incorrect Authorization Vulnerability (CVE-2022-25270)
|
|
|
Medium
|
|
Drupal Incorrect Authorization Vulnerability (CVE-2022-25274)
|
|
|
Medium
|
|
Drupal Incorrect Authorization Vulnerability (CVE-2023-31250)
|
|
|
Medium
|
|
Drupal Incorrect Authorization Vulnerability (CVE-2025-31673)
|
|
|
Medium
|
|
Drupal Incorrect Default Permissions Vulnerability (CVE-2020-13667)
|
|
|
Medium
|
|
Drupal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-6928)
|
|
|
Medium
|
|
Drupal Missing Authorization Vulnerability (CVE-2017-6923)
|
|
|
Medium
|
|
Drupal Numeric Errors Vulnerability (CVE-2007-5416)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2002-1806)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2005-0682)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2005-2106)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2005-3973)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2005-3974)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2005-3975)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-0070)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-1225)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-1226)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-1227)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-2260)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-2743)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-3570)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-4002)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-4120)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2006-5475)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2007-0658)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2007-4063)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2008-3661)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2015-3232)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2015-3233)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2016-3166)
|
|
|
Medium
|
|
Drupal Other Vulnerability (CVE-2024-11942)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5597)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2771)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3742)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3745)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4789)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4790)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4791)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4792)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1590)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1591)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2153)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4553)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4554)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5651)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0246)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-1476)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-5020)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-5267)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9015)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7570)
|
|
|
Medium
|
|
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7572)
|
|
|
Medium
|
|
Drupal Resource Management Errors Vulnerability (CVE-2013-0316)
|
|
|
Medium
|
|
Drupal Resource Management Errors Vulnerability (CVE-2014-5265)
|
|
|
Medium
|
|
Drupal Resource Management Errors Vulnerability (CVE-2014-5266)
|
|
|
Medium
|
|
Drupal Session Fixation Vulnerability (CVE-2008-3222)
|
|
|
Medium
|
|
Drupal trusted_host_patterns setting not configured
|
|
|
Medium
|
|
Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-6931)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-2471)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-2749)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-2750)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-7943)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-9451)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-6932)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-13662)
|
|
|
Medium
|
|
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-55806)
|
|
|
Medium
|
|
Drupal User Interface (UI) Misrepresentation of Critical Information Vulnerability (CVE-2025-13082)
|
|
|
Medium
|
|
Drupal Views module information disclosure vulnerability
|
|
|
Medium
|
|
DWR Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-5325)
|
|
|
Medium
|
|
DWR Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5326)
|
|
|
Medium
|
|
e107 Credentials Management Errors Vulnerability (CVE-2013-7305)
|
|
|
Medium
|
|
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5084)
|
|
|
Medium
|
