Drupal Unified Twig Extensions 安全漏洞

Drupal Unified Twig Extensions is a plugin for the Drupal community. A security vulnerability exists in Drupal Unified Twig Extensions that stems from insufficient data filtering and could lead to a cross-site scripting attack...

Drupal Protected Pages 安全漏洞

Drupal Protected Pages is a page locking plugin for the Drupal community. A security vulnerability exists in Drupal Protected Pages versions prior to 1.8.0, which stems from an unrestricted number of authentication attempts that could lead to a brute force attack...

Drupal Synchronize composer.Json With Contrib Modules 安全漏洞

Drupal Synchronize composer.Json With Contrib Modules is a module management plugin for the Drupal community. A security vulnerability exists in Drupal Synchronize composer.Json With Contrib Modules, which stems from an issue when synchronizing composer.Json with contributed modules...

Drupal API Key manager 安全漏洞

Drupal API Key manager is an API key management extension for the Drupal community. A security vulnerability exists in Drupal API Key manager. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Drupal Facets 安全漏洞

Drupal Facets is a browser plugin for the Drupal community. A security vulnerability exists in Drupal Facets version 0.0.0 up to and including version 2.0.10 and version 3.0.0 up to and including version 3.0.1, which stems from a lack of authorization and could lead to a forced browsing attack...

PT-2025-41620

Name of the Vulnerable Software and Affected Versions Drupal Synchronize composer.Json With Contrib Modules versions . Description A flaw exists in Drupal Synchronize composer.Json With Contrib Modules. The specific nature of the issue is not detailed in the provided information. Recommendations ...

Drupal Facets 安全漏洞

Drupal Facets is a browser plugin for the Drupal community. A security vulnerability exists in Drupal Facets versions 0.0.0 through 2.0.10 and 3.0.0 through 3.0.1, which stems from improper input neutralization during web page generation and could lead to a cross-site scripting attack...

PT-2025-41618

Name of the Vulnerable Software and Affected Versions Drupal Facets versions prior to 2.0.10 Drupal Facets versions prior to 3.0.1 Description A flaw exists in Drupal Facets that allows for Cross-Site Scripting XSS. This occurs due to improper neutralization of input during web page generation. T...

Drupal Authenticator Login 安全漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login version 0.0.0 through versions prior to 2.1.8 that stems from bypassing authentication using an alternate path or channel, which could...

Drupal Owl Carousel 2 安全漏洞

Drupal Owl Carousel 2 is a plugin for the Drupal community. A security vulnerability exists in Drupal Owl Carousel 2. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

PT-2025-41616

Name of the Vulnerable Software and Affected Versions Drupal Authenticator Login versions prior to 2.1.8 Description An authentication bypass issue exists in Drupal Authenticator Login. This allows attackers to bypass authentication mechanisms by utilizing an alternate path or channel...

PT-2025-41622

Name of the Vulnerable Software and Affected Versions Drupal Owl Carousel 2 affected versions not specified Description A flaw exists in Drupal Owl Carousel 2. The specific nature of the issue is not detailed in the provided information. Recommendations At the moment, there is no information abou...

PT-2025-41617

Name of the Vulnerable Software and Affected Versions Drupal Facets versions 0.0.0 through 2.0.9 Drupal Facets versions 3.0.0 through 3.0.0 Description A missing authorization issue exists in Drupal Facets, potentially allowing forceful browsing. The issue relates to insufficient access controls...

CVE-2025-9554: Undefined Security Weakness

Vulnerability in Drupal Owl Carousel 2.This issue affects Owl Carousel 2:...

CVE-2025-9553: Undefined Security Weakness

Vulnerability in Drupal API Key manager.This issue affects API Key manager:...

PT-2025-41621

Name of the Vulnerable Software and Affected Versions Drupal API Key manager affected versions not specified Description A security issue exists in the Drupal API Key manager. The specific details of the issue are not provided. Recommendations At the moment, there is no information about a newer...

PT-2025-41619

Name of the Vulnerable Software and Affected Versions Drupal Protected Pages versions 0.0.0 through 1.7.9 Description A flaw exists in Drupal Protected Pages that allows for excessive authentication attempts, potentially leading to brute force attacks. This issue impacts the Protected Pages modul...

CVE-2025-8093: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

CVE-2025-9550: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Facets allows Cross-Site Scripting XSS.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

CVE-2025-9551: Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...