Lucene search
+L

15 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•1 views

CVE-2026-16642: Improper Input Validation

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

5.7CVSS5.7AI score0.00188EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/28 5:11 p.m.•18 views

CVE-2025-12760

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...

5.4CVSS7AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/18 5:15 p.m.•16 views

CVE-2025-12760

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...

5.4CVSS0.00198EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/18 4:55 p.m.•4 views

CVE-2025-12760 Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...

6.6AI score0.00198EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/18 4:55 p.m.•13 views

CVE-2025-12760 Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...

5.4CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•1 views

CVE-2025-12760: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2012-5461

Malware in sbrugna...

4.3CVSS4.9AI score0.0111EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-51470

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00404EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/31 10:15 p.m.•40 views

CVE-2025-31676

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

8.8CVSS0.00552EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 9:36 p.m.•79 views

CVE-2025-31676

The Drupal Email TFA community module (versions 0.0.0 through 2.0.2 ) contains a Weak Authentication vulnerability. Due to insufficient protection against brute force attacks, an attacker can bypass the second factor of authentication. While this is mitigated by the requirement that the attacker ...

6.6AI score0.00552EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•3 views

CVE-2025-31676: Weak Authentication

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

8.8CVSS5.8AI score0.00552EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•13 views

Drupal Email TFA 安全漏洞

Drupal Email TFA is a Drupal community module that provides email-based two-factor authentication functionality for Drupal. A security vulnerability exists in Drupal Email TFA versions prior to 2.0.3, which stems from weak authentication and could lead to brute force exploits...

8.8CVSS6.8AI score0.00552EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•11 views

PT-2025-13840 · Drupal · Drupal Email Tfa

Name of the Vulnerable Software and Affected Versions: Drupal Email TFA versions 0.0.0 through 2.0.2 Description: The issue is related to weak authentication in Drupal Email TFA, allowing brute force attacks. Recommendations: For versions 0.0.0 through 2.0.2, update to version 2.0.3 or later to...

8.8CVSS6.6AI score0.00552EPSS
SaveExploits0References5
NVD
NVD
•added 2025/01/09 7:15 p.m.•42 views

CVE-2024-13256

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

7.5CVSS0.00404EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/09 7:03 p.m.•15 views

CVE-2024-13256 Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

7.5CVSS7.1AI score
SaveExploits0References5
Rows per page
Query Builder