Browse All CVEs
34,199 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114529 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114526 |
— | — | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114527 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114524 |
— | — | 0.0014 | 2026-10-30 | Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Pri | |
CVE-2026-114525 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-110738 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114523 |
— | — | 0.0053 | 2026-10-30 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") | |
CVE-2026-108514 |
— | — | 0.0020 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108515 |
— | — | 0.0020 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108097 |
— | — | 0.0033 | 2026-10-30 | 3 PoC | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera |
CVE-2026-108099 |
— | — | 0.0032 | 2026-10-30 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera | |
CVE-2026-107311 |
low | 3.7 | 0.0021 | 2026-10-30 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions b | |
CVE-2026-107312 |
medium | 4.3 | 0.0026 | 2026-10-30 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for | |
CVE-2026-107309 |
low | 3.7 | 0.0020 | 2026-10-30 | Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. Th | |
CVE-2026-107310 |
medium | 4.3 | 0.0020 | 2026-10-30 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side | |
CVE-2026-107307 |
medium | 4.3 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. T | |
CVE-2026-107308 |
low | 3.1 | 0.0015 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107268 |
medium | 4.3 | 0.0029 | 2026-10-30 | 1 PoC | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authe |
CVE-2026-107306 |
low | 3.8 | 0.0019 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107266 |
— | — | 0.0014 | 2026-10-30 | Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This i | |
CVE-2026-107267 |
medium | 5.3 | 0.0023 | 2026-10-30 | Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue af | |
CVE-2026-107264 |
medium | 5.4 | 0.0018 | 2026-10-30 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Dru | |
CVE-2026-107265 |
medium | 5.4 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107262 |
medium | 5.3 | 0.0012 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross | |
CVE-2026-107263 |
medium | 5.4 | 0.0017 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This i | |
CVE-2026-107260 |
— | — | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107261 |
medium | 4.2 | 0.0019 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authentic | |
CVE-2026-107259 |
medium | 5.4 | 0.0018 | 2026-10-30 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Dru | |
CVE-2026-107257 |
medium | 6.5 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This i | |
CVE-2026-107258 |
medium | 5.4 | 0.0017 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful | |
CVE-2026-107255 |
— | — | 0.0014 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Brows | |
CVE-2026-107256 |
— | — | 0.0018 | 2026-10-30 | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield a | |
CVE-2026-107253 |
medium | 5.9 | 0.0020 | 2026-10-30 | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. | |
CVE-2026-107254 |
medium | 4.8 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authentic | |
CVE-2026-107251 |
medium | 6.5 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) | |
CVE-2026-107252 |
medium | 5.4 | 0.0015 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107250 |
medium | 5.9 | 0.0020 | 2026-10-30 | Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. | |
CVE-2026-107249 |
critical | 9.8 | 0.0039 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-20588 |
medium | 6.7 | 0.0011 | 2026-10-30 | In mtee, there is a possible escalation of privilege due to a missing bounds check. This c | |
CVE-2026-20589 |
medium | 6.7 | 0.0011 | 2026-10-30 | In venc, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-20586 |
high | 8.8 | 0.0039 | 2026-10-30 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-20587 |
medium | 6.7 | 0.0011 | 2026-10-30 | In mtee, there is a possible escalation of privilege due to type confusion. This could lea | |
CVE-2026-20579 |
medium | 6.7 | 0.0011 | 2026-10-30 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-18629 |
— | — | 0.0014 | 2026-10-30 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process a | |
CVE-2026-19199 |
— | — | 0.0014 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper system calls to a | |
CVE-2026-74912 |
— | — | 0.0014 | 2026-10-30 | On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping | |
CVE-2026-74915 |
— | — | 0.0014 | 2026-10-30 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process ca | |
CVE-2026-65586 |
— | — | 0.0014 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-65584 |
— | — | 0.0018 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-65587 |
— | — | 0.0014 | 2026-10-30 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process ca |