CVE-2025-31673 Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002

Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

CVE-2025-31673

CVE-2025-31673 is an incorrect Authorization vulnerability in Drupal core that enables Forceful Browsing. Affected versions include Drupal core 8.0.0 to before 10.3.13, 10.4.0 to before 10.4.3, 11.0.0 to before 11.0.12, and 11.1.0 to before 11.1.3. The issue arises from improper access checks, cr...

CVE-2025-31673 Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002

Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

CVE-2025-31673 Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002

Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

CVE-2025-26689

Direct request 'Forced Browsing' issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered...

CVE-2025-26689

Direct request 'Forced Browsing' issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered...

CVE-2025-26689

Direct request 'Forced Browsing' issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered...

CVE-2025-26689

CVE-2025-26689 affects Inaba Denki CHOCO TEI WATCHER mini (IB-MCT001) — all versions. The vulnerability is a Direct request (Forced Browsing) flaw that allows a remote attacker to send a crafted HTTP request to obtain or delete product data and/or alter product settings. Initial sources list a CV...

PT-2025-13864 · Drupal · Drupal Two-Factor Authentication

Name of the Vulnerable Software and Affected Versions: Drupal Two-factor Authentication TFA versions 0.0.0 through 1.10.0 Description: The issue is related to an Incorrect Authorization vulnerability in the Drupal Two-factor Authentication TFA module, allowing Forceful Browsing. Recommendations:...

PT-2025-13855 · Drupal · Drupal Oauth2 Server

Name of the Vulnerable Software and Affected Versions: Drupal OAuth2 Server versions 0.0.0 through 2.0.x Description: The issue is related to a Missing Authorization vulnerability in the Drupal OAuth2 Server, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.0.x, updat...

Drupal OAuth2 Server 安全漏洞

Drupal OAuth2 Server is an authentication module for the Drupal community. A security vulnerability exists in Drupal OAuth2 Server versions prior to 2.1.0 that stems from a lack of authorization and could lead to forced browsing...

PT-2025-13961 · Apple · Macos Sequoia +5

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 tvOS versions prior to 18.4 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 iPadOS versions prior to 17.7.6 Description: A malicious website may be able to track user...

PT-2025-13837 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.12 Drupal core versions 10.4.0 through 10.4.2 Drupal core versions 11.0.0 through 11.0.11 Drupal core versions 11.1.0 through 11.1.2 Description: The issue is related to an Incorrect Authorization...

Drupal AI 安全漏洞

Drupal AI is a module or solution for the Drupal community that integrates artificial intelligence capabilities. A security vulnerability exists in Drupal AI versions prior to 1.0.3, which stems from a lack of authorization and could lead to forced browsing...

Drupal Open Social 安全漏洞

Drupal Open Social is a Drupal-based social networking platform solution from the Drupal community designed to provide a complete social networking capability for businesses, organizations or communities. A security vulnerability exists in Drupal Open Social versions prior to 12.3.11 and 12.4.0...

Drupal Open Social 安全漏洞

Drupal Open Social is a Drupal-based social networking platform solution from the Drupal community designed to provide a complete social networking capability for businesses, organizations or communities. A security vulnerability exists in Drupal Open Social versions prior to 12.3.11 and 12.4.0...

PT-2025-13845 · Drupal · Drupal Authenticator Login

Name of the Vulnerable Software and Affected Versions: Drupal Authenticator Login versions 0.0.0 through 2.0.5 Description: The issue is related to a Missing Authorization vulnerability in Drupal Authenticator Login, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.0....

Drupal Authenticator Login 安全漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login versions prior to 2.0.6, which stems from a lack of authorization and could lead to forced browsing...

PT-2025-13842 · Drupal · Drupal Ai

Name of the Vulnerable Software and Affected Versions: Drupal AI Artificial Intelligence versions 0.0.0 through 1.0.2 Description: The issue is related to a Missing Authorization vulnerability, which allows Forceful Browsing in Drupal AI Artificial Intelligence. Recommendations: For versions 0.0....

PT-2025-13849 · Drupal · Open Social

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.3.10 Open Social versions 12.4.0 through 12.4.9 Description: The issue is related to a Missing Authorization vulnerability in Drupal Open Social, which allows Forceful Browsing. Recommendations: For Open...