17308 matches found
Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191
The Diba Carousel Slider adds a Bootstrap carousel slider block that can be used directly without creating a View or custom integration. When the "Allow HTML description" option is enabled, slide descriptions are rendered using the raw stored field value instead of the field's rendered output. Th...
PT-2026-97656
Name of the Vulnerable Software and Affected Versions Drupal Webform module affected versions not specified Description The Webform Share submodule, which allows site builders to expose webforms for embedding on other sites, contains a flaw where submissions for Ajax-enabled webforms can bypass...
Webform - Less critical - Access bypass - SA-CONTRIB-2026-173
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficiently restrict access to certain submission view modes. Under certain conditions, a user who can view a submission could access a more...
PT-2026-97658
Name of the Vulnerable Software and Affected Versions Drupal Webform affected versions not specified Description Insufficient validation of a managed file upload element during the processing of new submissions allows a user with submission access to potentially access other managed files they ar...
PT-2026-97650
Name of the Vulnerable Software and Affected Versions Drupal Contributed Module affected versions not specified Description The Webform module contains a rating element that does not sufficiently validate data. This flaw could allow cross-site scripting XSS, a technique where malicious scripts ar...
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module includes a rating element, which did not sufficiently validate its data. Under specific circumstances, this could allow cross-site scripting on a page with a...
Drupal - Remote Code Execution
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...
Drupal SEoL (7.x)
According to its version, Drupal is 7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
CLSA-2026-1789638824 TuxCare security update for drupal/tfa_basic (1 CVE)
TuxCare rebuilt drupal/tfabasic to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...
CLSA-2026-1789633654 TuxCare security update for drupal/form_builder (1 CVE)
TuxCare rebuilt drupal/formbuilder to address 1 CVE. Fixed in 7.1.22-p1+tuxcare...
CLSA-2026-1789633542 TuxCare security update for drupal/commerce_paybox (1 CVE)
TuxCare rebuilt drupal/commercepaybox to address 1 CVE. Fixed in 7.1.5-p1+tuxcare...
CLSA-2026-1789633448 TuxCare security update for drupal/coffee (1 CVE)
TuxCare rebuilt drupal/coffee to address 1 CVE. Fixed in 7.2.3-p1+tuxcare...
CLSA-2026-1789633295 TuxCare security update for drupal/protected_pages (1 CVE)
TuxCare rebuilt drupal/protectedpages to address 1 CVE. Fixed in 7.2.4-p1+tuxcare...
CLSA-2026-1789633080 TuxCare security update for drupal/filefield_paths (1 CVE)
TuxCare rebuilt drupal/filefieldpaths to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...
CLSA-2026-1789632846 TuxCare security update for drupal/i18n (1 CVE)
TuxCare rebuilt drupal/i18n to address 1 CVE. Fixed in 7.1.35-p1+tuxcare...
CLSA-2026-1789632791 TuxCare security update for drupal/flag (1 CVE)
TuxCare rebuilt drupal/flag to address 1 CVE. Fixed in 7.3.9-p1+tuxcare...
CLSA-2026-1789632682 TuxCare security update for drupal/shs (1 CVE)
TuxCare rebuilt drupal/shs to address 1 CVE. Fixed in 7.1.10-p1+tuxcare...
CLSA-2026-1789632490 TuxCare security update for drupal/facebook_pixel (1 CVE)
TuxCare rebuilt drupal/facebookpixel to address 1 CVE. Fixed in 7.1.1-p1+tuxcare...