Browse All CVEs
34,182 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-118544 |
— | — | 0.0014 | 2026-10-30 | Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Co | |
CVE-2026-118545 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-118542 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118543 |
— | — | 0.0013 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site | |
CVE-2026-118540 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-118541 |
— | — | 0.0015 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. Th | |
CVE-2026-114573 |
— | — | 0.0024 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-118539 |
medium | 6.5 | 0.0031 | 2026-10-30 | Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This | |
CVE-2026-114571 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This | |
CVE-2026-114572 |
medium | 5.4 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Lo | |
CVE-2026-114554 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. | |
CVE-2026-114555 |
low | 3.5 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114548 |
— | — | 0.0015 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI | |
CVE-2026-114553 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. | |
CVE-2026-114546 |
— | — | 0.0015 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Al | |
CVE-2026-114547 |
— | — | 0.0014 | 2026-10-30 | Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue | |
CVE-2026-114544 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing | |
CVE-2026-114545 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing | |
CVE-2026-114542 |
— | — | 0.0015 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple O | |
CVE-2026-114543 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Bro | |
CVE-2026-114540 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issu | |
CVE-2026-114541 |
— | — | 0.0010 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Si | |
CVE-2026-114538 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114539 |
— | — | 0.0019 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck | |
CVE-2026-114536 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114537 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. | |
CVE-2026-114534 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114535 |
— | — | 0.0014 | 2026-10-30 | Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. T | |
CVE-2026-114532 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114533 |
— | — | 0.0014 | 2026-10-30 | Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Bro | |
CVE-2026-114530 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue | |
CVE-2026-114531 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114528 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114529 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114526 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114527 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114524 |
— | — | 0.0014 | 2026-10-30 | Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Pri | |
CVE-2026-114525 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-110738 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114523 |
— | — | 0.0053 | 2026-10-30 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") | |
CVE-2026-108514 |
— | — | 0.0020 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108515 |
— | — | 0.0020 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108097 |
— | — | 0.0033 | 2026-10-30 | 3 PoC | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera |
CVE-2026-108099 |
— | — | 0.0032 | 2026-10-30 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera | |
CVE-2026-107311 |
low | 3.7 | 0.0021 | 2026-10-30 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions b | |
CVE-2026-107312 |
medium | 4.3 | 0.0026 | 2026-10-30 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for | |
CVE-2026-107309 |
low | 3.7 | 0.0020 | 2026-10-30 | Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. Th | |
CVE-2026-107310 |
medium | 4.3 | 0.0020 | 2026-10-30 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side | |
CVE-2026-107307 |
medium | 4.3 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. T | |
CVE-2026-107308 |
low | 3.1 | 0.0015 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne |