14946 matches found
EUVD-2026-69991
Server-Side Request Forgery SSRF vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2...
CVE-2026-73474
The Drupal Entity Share Websub module (versions 0.0.0 through 1.1.2 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the insufficient validation of certain inputs , which allows an attacker to coerce the server into making unauthorized requests to internal or external r...
CVE-2026-73474 Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097
Server-Side Request Forgery SSRF vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2...
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
EUVD-2026-69990
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-73476
An Improper Handling of Case Sensitivity vulnerability in the Drupal External Authentication module (versions 0.0.0 through 2.0.13) allows Privilege Escalation . The module fails to ensure exact matching of externally supplied identity values when storing and looking up authentication mappings un...
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-73477 Quick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099
Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1...
CVE-2026-73477
An Incorrect Authorization flaw in the Drupal Quick Tabs module (versions 0.0.0 through 4.3.1 ) allows forceful browsing of restricted content. The module failed to correctly enforce access when rendering node and block tabs: it treated a neutral access result as a grant for node tabs and block p...
CVE-2026-73477 Quick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099
Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1...
EUVD-2026-69989
Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1...
CVE-2026-76757 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...
EUVD-2026-69988
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...
CVE-2026-76757 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...
CVE-2026-76756 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...
CVE-2026-76756
CVE-2026-76756 affects the Drupal Gammu SMS Daemon contrib module across all versions. Rapid7 classifies the underlying weakness as Improper Restriction of Operations within the Bounds of a Memory Buffer , and the vendor reference title indicates a timing attack in the smsd component. CISA's SSVC...
EUVD-2026-70013
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...