Known vulnerabilities in drupal7 (Debian package) 7.0~alpha2-1

Vendor: Debian

Software: drupal7 (Debian package)

Version: 7.0~alpha2-1

Software CPE: cpe:2.3:o:debian:drupal7_debian_package:*:*:*:*:*:debian_linux:*:*

Website: https://www.debian.org/

Total vulnerabilities: 8

Public exploits: 4

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.3

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Public exploit available	No	7.52-2+deb9u8	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU17807 - Improper Control of Generation of Code ('Code Injection') CVE-2019-6340	CWE-94	High	Public exploit available	Exploited	7.52-2+deb9u7	21.02.2019	SB2019022101 SB2019032109
#VU17065 - Improper input validation	CWE-20	Medium	No	No	7.52-2+deb9u6	17.01.2019	SB2019011709 SB2019011807
#VU17064 - Improper Control of Generation of Code ('Code Injection')	CWE-94	Medium	No	No	7.52-2+deb9u6	17.01.2019	SB2019011709 SB2019011807
#VU15405 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	CWE-78	High	No	No	7.52-2+deb9u5	18.10.2018	SB2018101801 SB2018102001
#VU15403 - URL Redirection to Untrusted Site ('Open Redirect')	CWE-601	Low	No	No	7.52-2+deb9u5	18.10.2018	SB2018101801 SB2018102001
#VU12182 - Improper Control of Generation of Code ('Code Injection') CVE-2018-7602	CWE-94	High	Public exploit available	Exploited	7.52-2+deb9u5	25.04.2018	SB2018042521 SB2018042605 SB2018042713 and 9 more
#VU11317 - Improper Control of Generation of Code ('Code Injection') CVE-2018-7600	CWE-94	High	Public exploit available	Exploited	7.52-2+deb9u5	28.03.2018	SB2018032820 SB2018032904 SB2018040101 and 6 more