CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 10/12/2024 |
| CVE-2024-55634 | 高8.1 | A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. | 10/12/2024 |
| CVE-2024-12393 | 中5.4 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. | 10/12/2024 |
| CVE-2024-45440 | 中5.3 | core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist. | 29/08/2024 |
| GHSA-qf65-hph9-453r | 中4.6 | Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library | 15/05/2024 |
| GHSA-j66p-fvp2-fxhj | 高7.8 | Drupal core Arbitrary PHP code execution | 15/05/2024 |
| GHSA-337w-fxpq-5m34 | 中4.2 | Drupal core uses a vulnerable Third-party library CKEditor | 15/05/2024 |
| GHSA-wxfg-253g-m7r4 | 中4.3 | Drupal core Open Redirect vulnerability | 15/05/2024 |
| GHSA-m9fv-whq2-6wmc | 高8.1 | Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar | 15/05/2024 |
| GHSA-5x28-3f32-x523 | 中4.3 | Drupal core Access control bypass | 15/05/2024 |
| GHSA-w333-5f96-mjrr | 中5.3 | Drupal core Denial of Service | 15/05/2024 |
| GHSA-jf8c-36vw-98x4 | 緊急 | Drupal core Remote Code Execution | 15/05/2024 |
| GHSA-jjx7-8462-w4m4 | 緊急 | Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution | 15/05/2024 |
| GHSA-58xv-7h9r-mx3c | 中 | Drupal Malicious file upload with filenames stating with dot | 15/05/2024 |
| GHSA-x6v2-xmrq-574j | 中5.8 | Drupal Anonymous Open Redirect | 15/05/2024 |
| GHSA-86xw-vmcx-9mj4 | 中 | Drupal Content moderation Access bypass | 15/05/2024 |
| GHSA-r67r-42wx-c8r7 | 中 | Drupal External URL injection through URL aliases leading to Open Redirect | 15/05/2024 |
| CVE-2020-13672 | 中6.1 | Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions prior to 9.1.7; 9.0.x versions prior to 9.0.12; 8.9.x versions prior to 8.9.14; 7.x versions prior to 7.80. | 11/02/2022 |