EUVD-2022-4409

Malicious code in bioql PyPI...

EUVD-2022-2726

Malicious code in bioql PyPI...

EUVD-2024-51463

Malicious code in bioql PyPI...

EUVD-2022-3807

Malicious code in bioql PyPI...

EUVD-2024-51493

Malicious code in bioql PyPI...

EUVD-2024-51457

Malicious code in bioql PyPI...

EUVD-2022-3829

Malicious code in bioql PyPI...

Drupal API Key manager module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module API Key manager versions...

Linux Distros Unpatched Vulnerability : CVE-2007-6752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests th...

Linux Distros Unpatched Vulnerability : CVE-2019-6342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces...

Linux Distros Unpatched Vulnerability : CVE-2015-6661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu. CVE-2015-6661 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2014-5021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the...

USN-7658-1: Drupal vulnerabilities

It was discovered that Drupal incorrectly parsed untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code...

CVE-2025-7031 Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4...

CVE-2025-7030 Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...

CVE-2025-6677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Paragraphs table allows Cross-Site Scripting XSS.This issue affects Paragraphs table: from 2.0.0 before 2.0.5...

CVE-2025-6674 CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor5 Youtube allows Cross-Site Scripting XSS.This issue affects CKEditor5 Youtube: from 0.0.0 before 1.0.3...

CVE-2025-48914

The COOKiES Consent Management module for Drupal (versions 0.0.0 through 1.2.14 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently validate the conversion of data-src attributes to src attri...

CVE-2025-48447

The Drupal Lightgallery component is vulnerable to a Cross-site Scripting (XSS) flaw due to Improper Neutralization of Input During Web Page Generation . This issue affects versions 0.0.0 through 1.6.0 . An attacker could potentially execute malicious scripts in the context of the user's browser....

CVE-2025-48448

The CVE-2025-48448 is tied to Drupal Admin Audit Trail and describes an Allocation of Resources Without Limits or Throttling vulnerability that enables excessive resource allocation. Affected versions are 0.0.0 through 1.0.4, with the issue addressed by upgrading to 1.0.5 or later. Connected advi...