Drupal < 8.5.11 / < 8.6.10 - RESTful Web Services unserialize() Remote Command Execution (Metasploit) CVE-2019-6340 · High Open
Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code Execution (PoC) CVE-2018-7602;SA-CORE-2018-004 · Critical Open
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (Metasploit) CVE-2018-7600 · Critical Open
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution CVE-2018-7600 · Critical Open
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' Remote Code Execution (PoC) CVE-2018-7600 · Critical Open
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session) CVE-2014-3704;OSVDB-113371 · Critical Open
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution) CVE-2014-3704;OSVDB-113371 · Critical Open
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User) CVE-2014-3704;OSVDB-113371;SA-CORE-2014-005 · Critical Open
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (2) CVE-2014-3704;OSVDB-113371 · Critical Open
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (PoC) (Reset Password) (1) CVE-2014-3704;SA-CORE-2014-005 · Critical Open
Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting OSVDB-93492 · High Open
Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting OSVDB-82463 · High Open
Drupal Module Embedded Media Field/Media 6.x : Video Flotsam/Media: Audio Flotsam – Multiple Vulnerabilities High Open
Drupal Module Ajax Checklist 5.x-1.0 – Multiple SQL Injections CVE-2008-5998;OSVDB-48521 · Critical Open
