Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Drupal Core Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-15916`Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityMedium
`CVE-2026-15917`Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityMedium
`CVE-2026-55805`Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityMedium
`CVE-2026-55808`Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009	Exploitation statusNot known exploited	FixYes	Published07/10/2026	SeverityMedium
`CVE-2026-55807`Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008	Exploitation statusNot known exploited	FixYes	Published07/10/2026	SeverityLow
`CVE-2026-55806`Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007	Exploitation statusNot known exploited	FixYes	Published07/10/2026	SeverityMedium
`CVE-2026-55804`Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006	Exploitation statusNot known exploited	FixYes	Published07/10/2026	SeverityMedium
`CVE-2026-55803`Drupal core - Critical - PHP object injection - SA-CORE-2026-005	Exploitation statusNot known exploited	FixYes	Published07/10/2026	SeverityMedium
`CVE-2026-9082`Drupal core - Highly critical - SQL injection - SA-CORE-2026-004	Exploitation statusKEV	FixYes	Published05/20/2026	SeverityCritical
`CVE-2026-6367`Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003	Exploitation statusNot known exploited	FixYes	Published05/19/2026	SeverityMedium
`CVE-2026-6366`Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002	Exploitation statusNot known exploited	FixYes	Published05/19/2026	SeverityMedium
`CVE-2026-6365`Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001	Exploitation statusNot known exploited	FixYes	Published05/19/2026	SeverityMedium
`CVE-2025-13083`Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008	Exploitation statusNot known exploited	FixYes	Published11/18/2025	SeverityLow
`CVE-2025-13082`Drupal core - Moderately critical - Defacement - SA-CORE-2025-007	Exploitation statusNot known exploited	FixYes	Published11/18/2025	SeverityMedium
`CVE-2025-13081`Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006	Exploitation statusNot known exploited	FixYes	Published11/18/2025	SeverityMedium
`CVE-2025-13080`Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005	Exploitation statusNot known exploited	FixYes	Published11/18/2025	SeverityMedium
`CVE-2025-31675`Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004	Exploitation statusNot known exploited	FixYes	Published03/31/2025	SeverityMedium
`CVE-2025-31674`Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003	Exploitation statusNot known exploited	FixYes	Published03/31/2025	SeverityHigh
`CVE-2025-31673`Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002	Exploitation statusNot known exploited	FixYes	Published03/31/2025	SeverityMedium
`CVE-2025-3057`Drupal core - Critical - Cross site scripting - SA-CORE-2025-001	Exploitation statusNot known exploited	FixYes	Published03/31/2025	SeverityMedium
`CVE-2024-55638`Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityCritical
`CVE-2024-55637`Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityCritical
`CVE-2024-55636`Drupal core - Less critical - Gadget chain - SA-CORE-2024-006	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityCritical
`CVE-2024-55635`Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityMedium
`CVE-2024-55634`Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityHigh
`CVE-2024-12393`Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityMedium
`CVE-2024-11942`Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002	Exploitation statusNot known exploited	FixYes	Published12/05/2024	SeverityMedium
`CVE-2024-11941`Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001	Exploitation statusNot known exploited	FixYes	Published12/05/2024	SeverityHigh
`CVE-2024-45440`	Exploitation statusNot known exploited	FixNot confirmed	Published08/29/2024	SeverityMedium
`CVE-2020-13688`	Exploitation statusNot confirmed	FixYes	Published06/11/2021	SeverityUnknown
`CVE-2020-13663`	Exploitation statusNot confirmed	FixYes	Published06/11/2021	SeverityUnknown
`CVE-2020-13667`	Exploitation statusNot confirmed	FixYes	Published05/17/2021	SeverityUnknown
`CVE-2020-13664`	Exploitation statusNot confirmed	FixYes	Published05/05/2021	SeverityUnknown
`CVE-2020-13662`	Exploitation statusNot confirmed	FixNot confirmed	Published05/05/2021	SeverityUnknown
`CVE-2020-13665`	Exploitation statusNot confirmed	FixYes	Published05/05/2021	SeverityUnknown
`CVE-2020-13666`	Exploitation statusNot confirmed	FixYes	Published05/05/2021	SeverityUnknown
`CVE-2020-13671`	Exploitation statusKEV	FixNot confirmed	Published11/20/2020	SeverityHigh
`CVE-2019-6342`Drupal core - Critical - Access bypass - SA-CORE-2019-008	Exploitation statusNot confirmed	FixNot confirmed	Published05/28/2020	SeverityUnknown
`CVE-2019-6341`Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004	Exploitation statusNot confirmed	FixYes	Published03/26/2019	SeverityUnknown
`CVE-2019-6340`Drupal core - Highly critical - Remote Code Execution	Exploitation statusKEV	FixYes	Published02/21/2019	SeverityHigh
`CVE-2017-6923`Access bypass in Drupal 8 views	Exploitation statusNot confirmed	FixYes	Published01/22/2019	SeverityUnknown
`CVE-2019-6338`third-party PEAR Archive_Tar library updates	Exploitation statusNot confirmed	FixYes	Published01/22/2019	SeverityUnknown
`CVE-2017-6922`Files uploaded by anonymous users into a private file system can be accessed by other anonymous users	Exploitation statusNot confirmed	FixYes	Published01/22/2019	SeverityUnknown
`CVE-2019-6339`PHAR stream wrapper Arbitrary PHP code execution	Exploitation statusNot confirmed	FixYes	Published01/22/2019	SeverityUnknown
`CVE-2017-6921`File REST resource does not properly validate	Exploitation statusNot confirmed	FixYes	Published01/15/2019	SeverityUnknown
`CVE-2017-6924`REST API can bypass comment approval - Access Bypass - Moderately Critical	Exploitation statusNot confirmed	FixYes	Published01/15/2019	SeverityUnknown
`CVE-2017-6377`	Exploitation statusNot confirmed	FixNot confirmed	Published03/16/2017	SeverityUnknown
`CVE-2017-6379`	Exploitation statusNot confirmed	FixNot confirmed	Published03/16/2017	SeverityUnknown
`CVE-2017-6381`	Exploitation statusNot confirmed	FixNot confirmed	Published03/16/2017	SeverityUnknown

49 / 49 Results

All vulnerabilities loaded

Security vulnerabilities in Drupal Core

Drupal Core

How many security vulnerabilities does Drupal Core currently have?

Does the latest version of Drupal Core have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management