Known vulnerabilities in drupal7 (Alpine package)

Known vulnerabilities in drupal7 (Alpine package)

Vendor: Alpine Linux Development Team

Software: drupal7 (Alpine package)

Software CPE: cpe:2.3:o:alpine:drupal7_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 18

Public exploits: 9

Known exploited (KEV): 7

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU49907 - UNIX Symbolic Link (Symlink) Following CVE-2020-36193	CWE-61	High	Available	Exploited	7.78-r0	18.01.2021	SB2021012112 SB2021012113 SB2021012410 and 20 more
#VU48668 - Improper input validation CVE-2020-28949	CWE-20	High	Available	Exploited	7.75-r0	19.11.2020	SB2020112607 SB2020112608 SB2020112609 and 20 more
#VU48669 - Deserialization of Untrusted Data CVE-2020-28948	CWE-502	High	Available	No	7.75-r0	19.11.2020	SB2020112607 SB2020112608 SB2020112609 and 21 more
#VU48540 - Unrestricted Upload of File with Dangerous Type CVE-2020-13671	CWE-434	High	No	Exploited	7.74-r0	18.11.2020	SB2020111827 SB2020111904 SB2020112325 and 4 more
#VU46767 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-13666	CWE-79	Medium	No	No	7.73-r0	17.09.2020	SB2020091701 SB2020091728 SB2020091801 and 3 more
#VU29135 - Server-Side Request Forgery (SSRF) CVE-2020-13663	CWE-918	Medium	No	No	7.72-r0	18.06.2020	SB2020061807 SB2020061810 SB2020061913 and 6 more
#VU28144 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2020-13662	CWE-601	Low	No	No	7.72-r0	21.05.2020	SB2020052102 SB2020061737 SB2020090504 and 3 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023	CWE-79	Low	Available	Exploited	7.70-r0	05.05.2020	SB2020042126 SB2020052033 SB2020052103 and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	7.70-r0	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU18416 - Deserialization of Untrusted Data CVE-2019-11831	CWE-502	High	No	No	7.67-r0	09.05.2019	SB2019050908 SB2019050909 SB2019051408 and 6 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	7.66-r0	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU18065 - Unrestricted Upload of File with Dangerous Type CVE-2019-6341	CWE-434	Medium	No	No	7.67-r0	25.03.2019	SB2019032501 SB2019032005 SB2019050923 and 6 more
#VU17066 - Deserialization of Untrusted Data CVE-2018-1000888	CWE-502	Medium	Available	No	7.62-r0	17.01.2019	SB2018122808 SB2019013101 SB2020061525 and 1 more
#VU13030 - Use After Free CVE-2018-11358	CWE-416	Medium	No	No	7.66-r0	29.05.2018	SB2018052901 SB2018052503 SB2018052504 and 9 more
#VU12182 - Improper Control of Generation of Code ('Code Injection') CVE-2018-7602	CWE-94	High	Available	Exploited	7.59-r0	25.04.2018	SB2018042521 SB2018042605 SB2018042713 and 9 more
#VU11317 - Improper Control of Generation of Code ('Code Injection') CVE-2018-7600	CWE-94	High	Available	Exploited	7.58-r0	28.03.2018	SB2018032820 SB2018032904 SB2018040101 and 6 more
#VU7179 - Protection Mechanism Failure CVE-2017-6922	CWE-693	Medium	No	Exploited	7.56-r0	23.06.2017	SB2017062301 SB2017062401 SB2017070414 and 5 more
#VU33039 - Out-of-bounds read CVE-2017-5847	CWE-125	Medium	No	No	7.67-r0	09.02.2017	SB2017042807 SB2017020312