EUVD-2022-4409

Malicious code in bioql PyPI...

EUVD-2022-2770

Malicious code in bioql PyPI...

EUVD-2025-11452

Malicious code in bioql PyPI...

EUVD-2022-3807

Malicious code in bioql PyPI...

EUVD-2022-3829

Malicious code in bioql PyPI...

EUVD-2024-51457

Malicious code in bioql PyPI...

EUVD-2024-51493

Malicious code in bioql PyPI...

Drupal API Key manager module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module API Key manager versions...

Linux Distros Unpatched Vulnerability : CVE-2007-6752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests th...

Linux Distros Unpatched Vulnerability : CVE-2019-6342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces...

Linux Distros Unpatched Vulnerability : CVE-2015-6661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu. CVE-2015-6661 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2014-5021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the...

USN-7658-1: Drupal vulnerabilities

It was discovered that Drupal incorrectly parsed untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code...

CVE-2025-7031 Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4...

CVE-2025-7030 Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...

CVE-2025-6677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Paragraphs table allows Cross-Site Scripting XSS.This issue affects Paragraphs table: from 2.0.0 before 2.0.5...

CVE-2025-6674 CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor5 Youtube allows Cross-Site Scripting XSS.This issue affects CKEditor5 Youtube: from 0.0.0 before 1.0.3...

CVE-2025-48914

The CVE-2025-48914 entry concerns the Drupal COOKiES Consent Management module (versions

CVE-2025-48447

CVE-2025-48447 affects Drupal Lightgallery prior to 1.6.0. The issue is described as improper neutralization of input during web page generation, enabling Cross-Site Scripting (XSS). Affected versions are 0.0.0 through 1.6.0, with remediation to update to 1.6.0 or later (per PT-2025-25222). Publi...

CVE-2025-48448

The CVE-2025-48448 is tied to Drupal Admin Audit Trail and describes an Allocation of Resources Without Limits or Throttling vulnerability that enables excessive resource allocation. Affected versions are 0.0.0 through 1.0.4, with the issue addressed by upgrading to 1.0.5 or later. Connected advi...