Lucene search
K

51 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 9:42 p.m.1 views

CVE-2026-3573

A flaw was found in Drupal AI Artificial Intelligence. An incorrect authorization vulnerability allows for resource injection. This issue enables an attacker to inject unauthorized resources, potentially leading to unintended system behavior or compromise...

5.8AI score0.00067EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 9:17 p.m.1 views

CVE-2026-3573

Incorrect Authorization vulnerability in Drupal AI Artificial Intelligence allows Resource Injection.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12...

7.5CVSS0.00067EPSS
Exploits0References1
CVE
CVE
added 2026/03/26 8:10 p.m.2 views

CVE-2026-3573

CVE-2026-3573 pertains to an Incorrect Authorization issue in Drupal AI (Artificial Intelligence). Affected versions are: 0.0.0 to before 1.1.11, and 1.2.0 to before 1.2.12. The vulnerability enables Resource Injection and leads to information disclosure. The connected documents confirm the affec...

7.5CVSS5.8AI score0.00067EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:10 p.m.0 views

CVE-2026-3573

Incorrect Authorization vulnerability in Drupal AI Artificial Intelligence allows Resource Injection.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12...

5.8AI score0.00067EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/26 8:10 p.m.17 views

CVE-2026-3573 AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

Incorrect Authorization vulnerability in Drupal AI Artificial Intelligence allows Resource Injection.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12...

0.00067EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.3 views

Drupal AI 安全漏洞

Drupal AI is a module or solution within the Drupal community that integrates artificial intelligence capabilities. Versions of Drupal AI prior to 1.1.11 and 1.2.12 contained security vulnerabilities. These vulnerabilities were due to improper authorization, which could lead to resource injection...

7.5CVSS5.8AI score0.00067EPSS
Exploits0References2
OSV
OSV
added 2026/01/28 8:16 p.m.1 views

CVE-2025-13981

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4...

4.4CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2026/01/28 8:16 p.m.3 views

CVE-2025-13981

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4...

4.4CVSS0.00054EPSS
Exploits0References1
CVE
CVE
added 2026/01/28 8:1 p.m.5 views

CVE-2025-13981

CVE-2025-13981 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal AI module (Artificial Intelligence) caused by improper neutralization of input during web page generation. Affected versions are: 0.0.0 before 1.0.7, 1.1.0 before 1.1.7, and 1.2.0 before 1.2.4. The provided document...

4.4CVSS5.9AI score0.00054EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/28 8:1 p.m.24 views

CVE-2025-13981 AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4...

0.00054EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/28 8:1 p.m.2 views

CVE-2025-13981

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4...

5.9AI score0.00054EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 8:1 p.m.2 views

CVE-2025-13981 AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4...

5.9AI score0.00054EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.4 views

PT-2026-5200

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4...

5.9AI score0.00054EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.3 views

Drupal AI security vulnerabilities

Drupal AI is a module or solution within the Drupal community that integrates artificial intelligence capabilities. Versions of Drupal AI prior to 1.0.7, 1.1.7, and 1.2.4 contain security vulnerabilities. These vulnerabilities stem from improper input during web page generation, which may lead to...

4.4CVSS5.6AI score0.00054EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-9045

Malicious code in bioql PyPI...

8.2CVSS6.5AI score0.00363EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-9031

Malicious code in bioql PyPI...

6.6CVSS6.4AI score0.00342EPSS
Exploits0References3
OSV
OSV
added 2025/08/15 5:15 p.m.1 views

CVE-2025-8675

Server-Side Request Forgery SSRF vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6...

8.8CVSS5.8AI score0.00054EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/02 11:10 p.m.11 views

CVE-2025-31693

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Drupal AI Artificial Intelligence allows OS Command Injection.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.5...

6.6CVSS7.3AI score0.00342EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/02 11:1 p.m.15 views

CVE-2025-31692

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Drupal AI Artificial Intelligence allows OS Command Injection.This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.5...

7.5CVSS7.3AI score0.00585EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/04/01 12:30 a.m.9 views

Drupal AI Vulnerable to OS Command Injection via Optional Automator Types

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Drupal AI Artificial Intelligence allows OS Command Injection. This issue affects AI Artificial Intelligence: from 0.0.0 before 1.0.5...

7.5CVSS7.2AI score0.00585EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder