EUVD-2026-113521

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1...

CVE-2026-114554 AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1...

CVE-2026-118561 Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118561 Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118561

The Drupal Single Content Sync module (versions 0.0.0 to 1.4.19 ) is vulnerable to a Path Traversal issue caused by insufficient validation of file sources and destinations during content imports. An attacker with the import single content permission can exploit this to write arbitrary files, dis...

CVE-2026-118561

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118574

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0...

CVE-2026-118574

The Drupal S3 File System module (versions 0.0.0 to 3.12.0) contains a CWE-732 vulnerability where it fails to sufficiently isolate upload context between separate object operations within the same request. This improper assignment of permissions for critical resources could allow attackers to up...

EUVD-2026-113692

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0...

CVE-2026-118574 S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0...

CVE-2026-118575

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature pad widget versions: from 0.0.0 to 1.15.0...

CVE-2026-118576

Drupal Stage File Proxy versions 0.0.0 through 3.1.7 and 4.0.0 through 4.0.1 are vulnerable to Cross-Site Scripting (XSS) . The root cause is insufficient sanitization of file URLs during fallback retrieval, which allows for the execution of malicious content. This vulnerability is specific to a ...

CVE-2026-118576 Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Stage File Proxy allows Cross-Site Scripting XSS. This issue affects Stage File Proxy versions: from 0.0.0 to 3.1.7, from 4.0.0 to 4.0.1...

EUVD-2026-113688

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Stage File Proxy allows Cross-Site Scripting XSS. This issue affects Stage File Proxy versions: from 0.0.0 to 3.1.7, from 4.0.0 to 4.0.1...

CVE-2026-118576 Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Stage File Proxy allows Cross-Site Scripting XSS. This issue affects Stage File Proxy versions: from 0.0.0 to 3.1.7, from 4.0.0 to 4.0.1...

CVE-2026-118576

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Stage File Proxy allows Cross-Site Scripting XSS. This issue affects Stage File Proxy versions: from 0.0.0 to 3.1.7, from 4.0.0 to 4.0.1...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

Apache Flink - Local File Inclusion

Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process aka local file inclusion. id: CVE-2020-17519 info: name: Apache Flink - Local File Inclusion author: pdtea...

CVE-2025-55891

CVE-2025-55891: Heap Corruption in TIFFCP.EXE docuPrinter Pro via Malformed TIFF File Summary A heap corruption vulnerability exists in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro, due to the use of an outdated and vulnerable version of libtiff v3.5.7. By supplying a...

CVE-2021-41773

CVE-2021-41773 apache http server vulnerability only works 2.4.49 requirement settings httpd.conf ... LoadModule cgimodule modules/modcgi.so uncomment this line ... AllowOverride none Require all denied comment out this line or set Require all granted ... References...