Threat database

Incorrect Authorization vulnerability in Drupal Commerce Eurobank (Redirect) allows Functionality Misuse.This issue affects Commerce Eurobank (Redirect): from 0.0.0 before 2.1.1.

EPSS 0.3%VulnerabilityDrupal#cwe-863Germany+6

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.

EPSS 0.3%VulnerabilityDrupal#cwe-862Germany+7

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.

EPSS 0.3%VulnerabilityDrupal#cwe-862Germany+7

CVE-2018-7602 is a high-severity remote code execution vulnerability affecting multiple subsystems within Drupal Core. It enables attackers to exploit various attack vectors on a Drupal site, potentially allowing unauthorized code execution. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.

CVE-2019-6340 is a remote code execution vulnerability in Drupal Core where certain field types fail to properly sanitize data from non-form sources, potentially allowing arbitrary PHP code execution. This vulnerability has been exploited in the wild. It is classified as high severity due to the risk of remote code execution.

CVE-2020-13671 is a vulnerability in Drupal core involving improper sanitization of extension file names, which can lead to un-restricted file uploads. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information are provided in the available data.

CVE-2018-7600 is a remote code execution vulnerability in Drupal Core that allows attackers to exploit multiple attack vectors to fully compromise affected Drupal sites. It has been exploited in the wild and is known to have been used in ransomware campaigns. The vulnerability is considered high severity due to the potential for complete site takeover.