← Back

Drupal

drupal

443 CVEs • 143 products

Products (143)

Click to collapse
Toggle
Drupal
drupal
Print
print
Project
project
Everyblog
everyblog
Imce Module
imce_module
Talk
talk
Views
views
Activity
activity
Data
data
Job Search
job_search
Recipe Module
recipe_module
Drupal Project
drupal_project
Drupal Mysite
drupal_mysite
Acidfree
acidfree
Textimage
textimage
Audio Module
audio_module
Getid3
getid3
Nodefamily
nodefamily
Print Module
print_module
Forward Module
forward_module
Invite Module
invite_module
Token Module
token_module
Shoutbox
shoutbox
Feature Module
feature_module
Bueditor
bueditor
Atom Module
atom_module
Archive Module
archive_module
Workflow
workflow
Openid
openid
Header Image
header_image
Webform Module
webform_module
E Publish
e-publish
Upload Module
upload_module
Mailsave
mailsave
Mailhandler
mailhandler
Link To Us
link_to_us
Node Clone
node_clone
Stock Module
stock_module
Link Module
link_module
Storm
storm
Comment Mail
comment_mail
Tasklist
tasklist
Plus1
plus1
Feedapi Mapper
feedapi_mapper

CVEs (443)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Drupal
1Drupal
Apr 16, 2026
Jun 9, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."
1Drupal
1Drupal
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
1Drupal
1Drupal
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.