17485 matches found
PT-2026-97660
Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description Insufficient sanitization of tooltips and help text within the Webform module allows for cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites...
PT-2026-97655
Name of the Vulnerable Software and Affected Versions Drupal Webform Entity Print submodule affected versions not specified Description The Webform Entity Print submodule does not sufficiently limit access to its print templates. A user with permissions to create and edit their own webforms can...
Webform - Less critical - Access bypass - SA-CONTRIB-2026-173
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficiently restrict access to certain submission view modes. Under certain conditions, a user who can view a submission could access a more...
PT-2026-97654
Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description The Webform module, used for creating forms and processing submissions, contains a flaw in how it handles Remote Post handlers. These handlers send data to external servers via APIs. The modul...
PT-2026-97650
Name of the Vulnerable Software and Affected Versions Drupal Contributed Module affected versions not specified Description The Webform module contains a rating element that does not sufficiently validate data. This flaw could allow cross-site scripting XSS, a technique where malicious scripts ar...
PT-2026-97668
Name of the Vulnerable Software and Affected Versions Drupal Cloud versions 0.0.0 through 7.0.1 Description An OS Command Injection issue exists in the Cloud module, which allows users to manage cloud resources. The module fails to sufficiently sanitize the Git branch and repository URL values...
PT-2026-97678
Name of the Vulnerable Software and Affected Versions Drupal Tawk.to - Live chat application versions 0.0.0 through 3.0.4 Description Cross-Site Request Forgery CSRF occurs when the module does not sufficiently validate certain requests. This allows an attacker to trick an authenticated user into...
Drupal - Remote Code Execution
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...
Drupal SEoL (7.x)
According to its version, Drupal is 7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
CLSA-2026-1789638824 TuxCare security update for drupal/tfa_basic (1 CVE)
TuxCare rebuilt drupal/tfabasic to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...
CLSA-2026-1789633654 TuxCare security update for drupal/form_builder (1 CVE)
TuxCare rebuilt drupal/formbuilder to address 1 CVE. Fixed in 7.1.22-p1+tuxcare...
CLSA-2026-1789633542 TuxCare security update for drupal/commerce_paybox (1 CVE)
TuxCare rebuilt drupal/commercepaybox to address 1 CVE. Fixed in 7.1.5-p1+tuxcare...
CLSA-2026-1789633448 TuxCare security update for drupal/coffee (1 CVE)
TuxCare rebuilt drupal/coffee to address 1 CVE. Fixed in 7.2.3-p1+tuxcare...
CLSA-2026-1789633295 TuxCare security update for drupal/protected_pages (1 CVE)
TuxCare rebuilt drupal/protectedpages to address 1 CVE. Fixed in 7.2.4-p1+tuxcare...
CLSA-2026-1789633080 TuxCare security update for drupal/filefield_paths (1 CVE)
TuxCare rebuilt drupal/filefieldpaths to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...
CLSA-2026-1789632846 TuxCare security update for drupal/i18n (1 CVE)
TuxCare rebuilt drupal/i18n to address 1 CVE. Fixed in 7.1.35-p1+tuxcare...
CLSA-2026-1789632791 TuxCare security update for drupal/flag (1 CVE)
TuxCare rebuilt drupal/flag to address 1 CVE. Fixed in 7.3.9-p1+tuxcare...
CLSA-2026-1789632682 TuxCare security update for drupal/shs (1 CVE)
TuxCare rebuilt drupal/shs to address 1 CVE. Fixed in 7.1.10-p1+tuxcare...