CVE-2026-118572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAuth OIDC SSO versions: from 0.0.0 to 3.1.1...

CVE-2026-118561

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118554

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

CVE-2026-107261

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107254

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2024-27954

CVE-2024-27954 📝 CVE-2024-27954 - Path Traversal & SSRF Vulnerability in WP Automatic Plugin Description An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in the WP Automatic plugin, allowing Path Traversal and Server-Side Request Forgery SSRF...

CVE-2026-107254 Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107254

The Drupal Authenticator Login Plus (2FA) module (versions 0.0.0 to 1.0.1 ) contains an Authentication Bypass Using an Alternate Path or Channel vulnerability (CWE-288). The root cause is that the module fails to enforce the second factor when a user authenticates using a Drupal core one-time log...

EUVD-2026-113578

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107261 Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

EUVD-2026-113574

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107261

The Authenticator Login Plus (2FA) module for Drupal is vulnerable to an Authentication Bypass Using an Alternate Path or Channel (CWE-288). This flaw may allow a user to log in using only a password, even when the site-wide enforcement of two-factor authentication (2FA) is enabled. This issue af...

CVE-2026-114572

The Domain Login Restrict module for Drupal (versions 0.0.0 to 1.5.0) is vulnerable to an Authentication Bypass (CWE-288) because it fails to sufficiently enforce login restrictions when users authenticate via methods other than the standard login form. This allows users to log in to domains they...

CVE-2026-118561 Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118561

The Single Content Sync module for Drupal (versions 0.0.0 to 1.4.19 ) is vulnerable to an External Control of File Name or Path (CWE-73) issue. The root cause is the module's failure to sufficiently validate file sources and destinations during content imports. An attacker with the import single ...

EUVD-2026-113498

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118572 OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAuth OIDC SSO versions: from 0.0.0 to 3.1.1...

VMware vRealize Log Insight - Path Traversal

he vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. id: CVE-2022-31706 info: name: VMware vRealize Log Insight - Path Traversal...

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

CVE-2021-41773

CVE-2021-41773 apache http server vulnerability only works 2.4.49 requirement settings httpd.conf ... LoadModule cgimodule modules/modcgi.so uncomment this line ... AllowOverride none Require all denied comment out this line or set Require all granted ... References...