17700 matches found
CVE-2026-18985
The Edit in-place field module for Drupal (versions 0.0.0 through 2.1.1) is vulnerable to an incorrect authorization issue that allows Forceful Browsing . The root cause is the module's failure to sufficiently verify access rights when editing entities, which could allow a malicious user to craft...
CVE-2026-18985 Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1...
CVE-2026-18985 Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1...
CVE-2026-18985 Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1...
portfolio-drupal-cve-2026-9082
Questo repository non contiene un README...
CVE-2026-55805: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0., from 0.0.0 to 11.1., from...
CVE-2026-18985: Incorrect Authorization
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1...
CVE-2026-16646: Missing Authentication for Critical Function
Vulnerability in Drupal PanKM. This issue affects PanKM versions:...
CVE-2026-16643: Improper Input Validation
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...
CVE-2026-16641: Improper Input Validation
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...
CVE-2026-16639: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-15916: Missing Authorization
Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0., from 0.0.0 to 11.1., from 0.0.0 to 11.2...
CVE-2026-16642: Improper Input Validation
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...
CVE-2026-15917: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS. This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2...
CVE-2026-15088: Improper Input Validation
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...
CVE-2026-16644: Incorrect Authorization
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0...
CVE-2026-18259: Observable Timing Discrepancy
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2...
PT-2026-81898
Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
