Filtered by vendor Drupal
Subscriptions
Total
1029 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-76757 | 1 Drupal | 1 Gammu Sms Daemon | 2026-09-02 | 5.9 Medium |
| Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. | ||||
| CVE-2026-76756 | 1 Drupal | 1 Gammu Sms Daemon | 2026-09-02 | 5.9 Medium |
| Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. | ||||
| CVE-2026-73477 | 1 Drupal | 1 Quick Tabs | 2026-09-02 | 5.3 Medium |
| Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1. | ||||
| CVE-2026-73476 | 1 Drupal | 1 External Authentication | 2026-09-02 | 5.4 Medium |
| Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13. | ||||
| CVE-2026-81201 | 1 Drupal | 1 Monster Menus | 2026-09-02 | 6.1 Medium |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3. | ||||
| CVE-2026-81160 | 1 Drupal | 1 Slick Carousel | 2026-09-02 | 6.1 Medium |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0. | ||||
| CVE-2026-18260 | 1 Drupal | 1 Disable Login Page | 2026-09-02 | 5.7 Medium |
| Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4. | ||||
| CVE-2026-18985 | 1 Drupal | 1 Edit In-place Field | 2026-08-28 | 8.1 High |
| Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1. | ||||
| CVE-2026-18261 | 1 Drupal | 1 Powerful Surveys | 2026-08-28 | 5.7 Medium |
| Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*. | ||||
| CVE-2026-18259 | 1 Drupal | 1 Token Content Access | 2026-08-28 | 7.5 High |
| Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2. | ||||
| CVE-2026-15088 | 1 Drupal | 1 Development Environment | 2026-08-28 | 5.7 Medium |
| Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*. | ||||
| CVE-2026-16645 | 1 Drupal | 1 Photoswipe - Responsive Javascript Modal Image Gallery | 2026-08-28 | 9.1 Critical |
| Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0. | ||||
| CVE-2026-16643 | 1 Drupal | 1 Lunr Exposed Filters | 2026-08-28 | 5.7 Medium |
| Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*. | ||||
| CVE-2026-16642 | 1 Drupal | 1 Email Login Otp | 2026-08-28 | 5.7 Medium |
| Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*. | ||||
| CVE-2026-16640 | 1 Drupal | 1 Search Api Autocomplete | 2026-08-28 | 6.1 Medium |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0. | ||||
| CVE-2026-16639 | 1 Drupal | 1 Internationalization Single Sign-on | 2026-08-28 | 9.8 Critical |
| Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0. | ||||
| CVE-2026-16638 | 1 Drupal | 1 Media Folders | 2026-08-28 | 6.1 Medium |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8. | ||||
| CVE-2026-55805 | 1 Drupal | 1 Drupal Core | 2026-08-26 | 5.4 Medium |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*. | ||||
| CVE-2026-15916 | 1 Drupal | 1 Drupal Core | 2026-08-26 | 4.2 Medium |
| Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*. | ||||
| CVE-2026-15089 | 1 Drupal | 1 Commerce Guest Registration | 2026-08-25 | 9.1 Critical |
| Vulnerability in Drupal Commerce guest registration. This issue affects Commerce guest registration versions: *.*. | ||||